| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CAHZVHVQdvx_XZNTqaV9Lx3RxxS=qFO1PpYWX6dSU1B16BUb-Sw@mail.gmail.com> Date: Wed, 20 Jan 2021 13:29:02 +0100 From: Manuel Bua <manuel.bua@...il.com> To: fulldisclosure@...lists.org Subject: [FD] CVE-2020-20269 - Caret Editor v4.0.0-rc21 Remote Code Execution Details ================ Product: Caret Editor Product URL: https://caret.io/ Vendor: Caret.io Ltd. Vulnerability: Remote Code Execution Vulnerable version: Caret Editor v4.0.0-rc21 Fixed version: Caret Editor v4.0.0-rc22 CVE Number: CVE-2020-20269 CVE URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20269 Author: Manuel Bua (dudez) Vulnerability Description ================ A specially crafted Markdown document could cause the execution of malicious Javascript code. Reference ================ https://github.com/careteditor/issues/issues/841 _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists