Vendor
Typora
5 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.3
Typora Local File Disclosure
Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markd…
-
Medium 6.1
Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript c…