PT-2024-30672

Name of the Vulnerable Software and Affected Versions JupyterLab versions prior to 3.6.8 JupyterLab versions prior to 4.2.5 Jupyter Notebook versions prior to 7.2.2 Description This issue depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using...

CVE-2024-41482

Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the MathJax component...

CVE-2024-41482

Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the MathJax component...

Typora 安全漏洞

Typora is an editor in the Typora open source. A security vulnerability exists in Typora versions prior to 1.9.3, which stems from a cross-site scripting vulnerability in the MathJax module...

CVE-2024-41482

Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the MathJax component...

CVE-2024-41482

CVE-2024-41482 affects Typora before 1.9.3, with an XSS vulnerability in the MathJax component used by the Markdown editor. The issue is triggered via MathJax, allowing script execution under certain inputs. Public details consistently identify the affected software and vulnerability class but do...

CVE-2024-41482

Typora before 1.9.3 Markdown editor has a cross-site scripting XSS vulnerability via the MathJax component...

PT-2024-29420 · Typora +1 · Typora +1

Name of the Vulnerable Software and Affected Versions: Typora versions prior to 1.9.3 Description: The issue is related to a cross-site scripting XSS vulnerability via the MathJax component. This allows for potential malicious script execution. Recommendations: For versions prior to 1.9.3, update...

CVE-2024-32945

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-32945

Mattermost Mobile Apps (versions

CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts

Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...

Mattermost Mobile Apps Security Vulnerability

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.16.0 and earlier, which stems from a failure to prevent misuse of globally shared MathJax state, allowing an attacker to change the content of a LateX...

PT-2024-14528 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this issue. The specific flaw exists...

CVE-2023-49807

Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

CVE-2023-49807

Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

Cross site scripting

Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...

CVE-2023-49807

CVE-2023-49807 is a stored XSS in GROWI when processing MathJax, affecting GROWI versions prior to 6.0.0. Exploitation could cause arbitrary script execution in a user’s browser after visiting the site (web app context). The connected sources (NVD, Red Hat, JVN, OSV, PRION/PTSecurity) confirm the...

CVE-2023-49807

Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product...