CVE-2019-6803: XSS
Published Jan 25, 2019
·Updated
typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.
Affected Software
94 affected components
Typora typora=0.8.1-alpha
Typora typora=0.8.2-alpha
Typora typora=0.8.5-alpha
Typora typora=0.8.6-alpha
Typora typora=0.8.7-alpha
Typora typora=0.8.8-beta
Typora typora=0.8.9-beta
Typora typora=0.9.0-beta
Typora typora=0.9.1-beta
Typora typora=0.9.2-beta
Typora typora=0.9.3-beta
Typora typora=0.9.4-beta
Typora typora=0.9.4.5-beta
Typora typora=0.9.5-beta
Typora typora=0.9.5.6-beta
Typora typora=0.9.5.7-beta
Typora typora=0.9.6-beta
Typora typora=0.9.6.1-beta
Typora typora=0.9.6.8-beta
Typora typora=0.9.7-beta
Typora typora=0.9.7.4-beta
Typora typora=0.9.7.5-beta
Typora typora=0.9.7.8-beta
Typora typora=0.9.7.9-beta
Typora typora=0.9.8-beta
Typora typora=0.9.8.1-beta
Typora typora=0.9.8.5-beta
Typora typora=0.9.8.6-beta
Typora typora=0.9.8.7-beta
Typora typora=0.9.8.7.2-beta
Typora typora=0.9.8.8-beta
Typora typora=0.9.9.0-beta
Typora typora=0.9.9.1-beta
Typora typora=0.9.9.2-beta
Typora typora=0.9.9.2.1-beta
Typora typora=0.9.9.2.5-beta
Typora typora=0.9.9.3-beta
Typora typora=0.9.9.4-beta
Typora typora=0.9.9.4.4-beta
Typora typora=0.9.9.5-beta
Typora typora=0.9.9.5.1
Typora typora=0.9.9.6-beta
Typora typora=0.9.9.6.2-beta
Typora typora=0.9.9.6.4-beta
Typora typora=0.9.9.7-beta
Typora typora=0.9.9.7.1-beta
Typora typora=0.9.9.7.6-beta
Typora typora=0.9.9.7.8-beta
Typora typora=0.9.9.8-beta
Typora typora=0.9.9.8.2-beta
Typora typora=0.9.9.8.4-beta
Typora typora=0.9.9.8.5-beta
Typora typora=0.9.9.8.8-beta
Typora typora=0.9.9.8.9-beta
Typora typora=0.9.9.9.0-beta
Typora typora=0.9.9.9.2-beta
Typora typora=0.9.9.9.3-beta
Typora typora=0.9.9.9.4-beta
Typora typora=0.9.9.9.4.2-beta
Typora typora=0.9.9.10-beta
Typora typora=0.9.9.10.1-beta
Typora typora=0.9.9.10.2-beta
Typora typora=0.9.9.10.3-beta
Typora typora=0.9.9.10.4-beta
Typora typora=0.9.9.10.6-beta
Typora typora=0.9.9.10.7-beta
Typora typora=0.9.9.10.8-beta
Typora typora=0.9.9.10.9-beta
Typora typora=0.9.9.11-beta
Typora typora=0.9.9.11.2-beta
Typora typora=0.9.9.12-beta
Typora typora=0.9.9.12.4-beta
Typora typora=0.9.9.12.5
Typora typora=0.9.9.13-beta
Typora typora=0.9.9.13.6-beta
Typora typora=0.9.9.14-beta
Typora typora=0.9.9.15-beta
Typora typora=0.9.9.15.2-beta
Typora typora=0.9.9.15.3-beta
Typora typora=0.9.9.16-beta
Typora typora=0.9.9.16.1-beta
Typora typora=0.9.9.16.2-beta
Typora typora=0.9.9.17-beta
Typora typora=0.9.9.17.4-beta
Typora typora=0.9.9.17.5-beta
Typora typora=0.9.9.18-beta
Typora typora=0.9.9.18.1-beta
Typora typora=0.9.9.19-beta
Typora typora=0.9.9.19.3-beta
Typora typora=0.9.9.19.4-beta
Typora typora=0.9.9.20-beta
Typora typora=0.9.9.20.1-beta
Typora typora=0.9.9.20.2-beta
Typora typora=0.9.9.20.3-beta
Event History
Jan 25, 2019
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Data Sourced
via NVD·05:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6803?
CVE-2019-6803 is rated as a high severity vulnerability due to the possibility of remote command execution.
2
How do I fix CVE-2019-6803?
To fix CVE-2019-6803, upgrade to Typora version 0.9.9.20.4 or later.
3
What does CVE-2019-6803 exploit?
CVE-2019-6803 exploits cross-site scripting (XSS) vulnerabilities via the left outline bar in Typora.
4
Is CVE-2019-6803 targeted at all Typora versions?
CVE-2019-6803 affects all Typora versions before 0.9.9.20.4.
5
Can CVE-2019-6803 impact my data?
Yes, CVE-2019-6803 potentially allows attackers to execute remote commands, possibly leading to data loss or compromise.