CVE-2022-43668

Typora fails to properly neutralize JavaScript code

Typora における JavaScript コードの無効化処理が不十分な問題

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product.

Disclosure Date

2022/11/21

Credit

@ei01241

CWE

  • CWE-116

Product URLs

Reference

Back