CVE-2023-2316
HIGHTypora < 1.6.7 - Path Traversal and Local File Exfiltration via typora://app/ Handler
Title source: llmDescription
Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/<absolute-path>". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
References (2)
Core 2
Core References
Vendor Advisory release-notes
https://support.typora.io/What's-New-1.6/
Exploit, Mitigation, Third Party Advisory third-party-advisory
https://starlabs.sg/advisories/23/23-2316/
Scores
CVSS v3
7.4
EPSS
0.0057
EPSS Percentile
42.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-22
Status
published
Products (1)
typora/typora
< 1.6.7
Published
Aug 19, 2023
Tracked Since
Feb 18, 2026