PT-2020-10403 · Mermaid+2 · Mermaid+2

0Xbadca7 · Published 2020-01-09 · Updated 2021-09-08 · CVE-2019-20374

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Typora versions prior to 0.9.9.31.2 on macOS Typora versions prior to 0.9.81 on Linux

Description A mutation cross-site scripting issue leads to remote code execution through Mermaid code blocks. This occurs due to improper HTML sanitization when a file is opened in Typora, which is based on the Electron framework. The lack of proper sanitization allows for the execution of code in an unsandboxed environment.

Recommendations For Typora versions prior to 0.9.9.31.2 on macOS, update to version 0.9.9.31.2 or later to resolve the issue. For Typora versions prior to 0.9.81 on Linux, update to version 0.9.81 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Mermaid code blocks in Typora until a patch is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-20374

Affected Products

Electron

Mermaid

Typora

References · 4

• https://github.com/cure53/DOMPurify/commit/4e8af7b2c4a159b683d317e02c5cbddb86dc4a0e · Patch
• https://osv.dev/vulnerability/CVE-2019-20374 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20374 · Security Note
• https://github.com/typora/typora-issues/issues/3124 · Note