CVE-2022-43668
Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a…
Medium · published December 7, 2022
What it is
Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00380 · 30.8th percentile
- Published
- 2022-12-07T00:00Z
EPSS history
Timeline