Skip to content
OpenAdvisories

Vendor

TurboWarp

1 known vulnerabilities.

Products

desktop 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2023-40168

    Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop

    TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only r…

    TurboWarp desktop