CVE-2023-2971 - Typora Local File Disclosure

Back Back to CVE browser

MEDIUM

Typora Local File Disclosure

Published Aug 19, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.49%

Description

Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.

Affected products

Vendor Typora Product Typora Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.7.0-dev

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Typora

unaffected

Version	Status	Constraints
0	affected	<1.7.0-dev

Vendor Typora Product Typora Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.7.0-dev

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Typora

unaffected

Version	Status	Constraints
0	affected	<1.7.0-dev

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34415
Advisory
https://starlabs.sg/advisories/23/23-2971/
third-party-advisoryExploitMitigationThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34415		Advisory
https://starlabs.sg/advisories/23/23-2971/		third-party-advisoryExploitMitigationThird Party Advisory