typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| typora | typora | 0.9.9.8 |
| typora | typora | 0.9.9.2 |
| typora | typora | 0.9.9.17.4 |
| typora | typora | 0.9.9.10.7 |
| typora | typora | 0.9.9.10.2 |
| typora | typora | 0.9.9.20.1 |
| typora | typora | 0.9.9.19.3 |
| typora | typora | 0.9.9.1 |
| typora | typora | 0.9.9.19.4 |
| typora | typora | 0.8.5 |
| typora | typora | 0.9.8 |
| typora | typora | 0.9.0 |
| typora | typora | 0.9.4 |
| typora | typora | 0.9.6.1 |
| typora | typora | 0.9.9.6 |
| typora | typora | 0.9.9.7.1 |
| typora | typora | 0.9.9.10.1 |
| typora | typora | 0.9.9.12.5 |
| typora | typora | 0.9.8.7 |
| typora | typora | 0.9.9.9.3 |
| typora | typora | 0.9.7 |
| typora | typora | 0.9.9.3 |
| typora | typora | 0.9.9.7.6 |
| typora | typora | 0.9.9.14 |
| typora | typora | 0.9.7.9 |
| typora | typora | 0.9.6.8 |
| typora | typora | 0.9.9.9.2 |
| typora | typora | 0.9.9.16.1 |
| typora | typora | 0.9.9.5 |
| typora | typora | 0.9.5.6 |
| typora | typora | 0.9.9.20.2 |
| typora | typora | 0.9.9.8.9 |
| typora | typora | 0.9.9.16 |
| typora | typora | 0.9.9.2.5 |
| typora | typora | 0.9.6 |
| typora | typora | 0.9.8.6 |
| typora | typora | 0.9.9.5.1 |
| typora | typora | 0.9.9.17.5 |
| typora | typora | 0.9.9.10.6 |
| typora | typora | 0.8.8 |
| typora | typora | 0.8.9 |
| typora | typora | 0.9.2 |
| typora | typora | 0.9.9.4.4 |
| typora | typora | 0.9.9.8.4 |
| typora | typora | 0.9.4.5 |
| typora | typora | 0.9.9.8.2 |
| typora | typora | 0.9.9.10.9 |
| typora | typora | 0.9.7.4 |
| typora | typora | 0.9.9.10.4 |
| typora | typora | 0.9.9.20 |
| typora | typora | 0.8.7 |
| typora | typora | 0.9.9.7 |
| typora | typora | 0.9.9.8.5 |
| typora | typora | 0.9.9.17 |
| typora | typora | 0.9.8.7.2 |
| typora | typora | 0.9.8.8 |
| typora | typora | 0.8.2 |
| typora | typora | 0.8.6 |
| typora | typora | 0.9.9.9.0 |
| typora | typora | 0.9.9.11.2 |
| typora | typora | 0.9.9.12.4 |
| typora | typora | 0.9.9.15.3 |
| typora | typora | 0.9.9.0 |
| typora | typora | 0.9.9.2.1 |
| typora | typora | 0.9.9.15.2 |
| typora | typora | 0.9.8.5 |
| typora | typora | 0.9.9.8.8 |
| typora | typora | 0.9.9.12 |
| typora | typora | 0.9.9.13 |
| typora | typora | 0.9.9.16.2 |
| typora | typora | 0.9.5.7 |
| typora | typora | 0.9.9.13.6 |
| typora | typora | 0.9.9.18 |
| typora | typora | 0.9.7.5 |
| typora | typora | 0.9.9.19 |
| typora | typora | 0.9.9.10 |
| typora | typora | 0.9.9.11 |
| typora | typora | 0.9.1 |
| typora | typora | 0.9.9.6.2 |
| typora | typora | 0.9.9.9.4.2 |
| typora | typora | 0.9.8.1 |
| typora | typora | 0.9.9.9.4 |
| typora | typora | 0.9.9.4 |
| typora | typora | 0.9.5 |
| typora | typora | 0.9.9.7.8 |
| typora | typora | 0.8.1 |
| typora | typora | 0.9.9.10.3 |
| typora | typora | 0.9.9.18.1 |
| typora | typora | 0.9.9.20.3 |
| typora | typora | 0.9.7.8 |
| typora | typora | 0.9.9.6.4 |
| typora | typora | 0.9.9.10.8 |
| typora | typora | 0.9.3 |
| typora | typora | 0.9.9.15 |
typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| typora | typora | * |
typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| typora | typora | * |