Caret Editor 4.0.0-rc21 Remote Code Execution

Caret Editor version 4.0.0-rc21 suffers from a remote code execution vulnerability.


MD5 | cb00c1ac03e63e1d8f3a7a133d9e2706

Download
Details
================

Product: Caret Editor
Product URL: https://caret.io/
Vendor: Caret.io Ltd.
Vulnerability: Remote Code Execution
Vulnerable version: Caret Editor v4.0.0-rc21
Fixed version: Caret Editor v4.0.0-rc22
CVE Number: CVE-2020-20269
CVE URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20269
Author: Manuel Bua (dudez)


Vulnerability Description
================

A specially crafted Markdown document could cause the execution of
malicious Javascript code.


Reference
================

https://github.com/careteditor/issues/issues/841



Source: packetstormsecurity.com
Related Posts