Design/Logic Flaw

2023-08-1906:15:00

PRIOn knowledge base

www.prio-n.com

typora

path handling

local file access

exfiltration

crafted webpage

vulnerability

exploitation

markdown file

malicious webpage

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via “typora://app/<absolute-path>”.

This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.