CVE-2023-2971

CVSS V2 None CVSS V3 None
Description
Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
Overview
  • CVE ID
  • CVE-2023-2971
  • Assigner
  • STAR_Labs
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-08-19T05:45:35.025Z
  • Last Modified Date
  • 2023-08-19T05:45:35.025Z
References
Reference URL Reference Tags
https://starlabs.sg/advisories/23/23-2971/ third-party-advisory
History
Created Old Value New Value Data Type Notes
2024-06-24 21:54:32 Added to TrackCVE