CVE-2023-39703: XSS
Published Sep 1, 2023
·Updated
A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading a crafted Markdown file.
Affected Software
1 affected component
Typora typora<1.6.7
Event History
Sep 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this cross-site scripting (XSS) vulnerability?
The vulnerability ID of this cross-site scripting (XSS) vulnerability is CVE-2023-39703.
2
What software is affected by this cross-site scripting (XSS) vulnerability?
Typora v1.6.7 is affected by this cross-site scripting (XSS) vulnerability.
3
What is the severity rating of this cross-site scripting (XSS) vulnerability?
The severity rating of this cross-site scripting (XSS) vulnerability is medium (CVSS score: 6.1).
4
How can an attacker exploit this cross-site scripting (XSS) vulnerability in Typora v1.6.7?
An attacker can exploit this cross-site scripting (XSS) vulnerability by uploading a crafted Markdown file.
5
Is there a fix available for this cross-site scripting (XSS) vulnerability?
No specific fix information is provided, but it is recommended to update to the latest version of Typora to mitigate this vulnerability.