Skip to content
OpenAdvisories

Vendor

Typora

5 known vulnerabilities.

Products

Typora 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2023-2317

    Typora DOM-Based Cross-site Scripting leading to Remote Code Execution

    DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in <embed> tag. This vu…

    Typora Typora
  • High 7.4
    CVE-2023-2316

    Typora Local File Disclosure

    Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/<absolute-path>". This vulnerability can be exploited if a user opens a malicious mar…

    Typora Typora