Design/Logic Flaw

2023-08-1906:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

typora vulnerability

windows

linux

local file access

exfiltration

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via “typora://app/typemark/”. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.