CVE-2022-43668

2022-12-0700:00:00

jpcert

www.cve.org

typora vulnerability

javascript code execution

cve-2022-43668

information security

EPSS

0.001

Percentile

33.7%

JSON

Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the file when opening a file with the affected product.

CNA Affected

[
  {
    "vendor": "Typora",
    "product": "Typora",
    "versions": [
      {
        "version": "versions prior to 1.4.4",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN26044739/index.html

typora.io/releases/all

EPSS

0.001

Percentile

33.7%

JSON

Related for CVELIST:CVE-2022-43668