CVE-2020-20269

A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22...

CVE-2020-20269

Caret Editor (pre-4.0.0-rc22) is affected by CVE-2020-20269 due to a crafted Markdown document that can trigger execution of malicious JavaScript. The vulnerability, scored high (CRITICAL) with CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), suggests a remote-like attack vector via a Markdown payl...