CVE-2019-6803
Summary
| CVE | CVE-2019-6803 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-01-25 05:29:00 UTC |
| Updated | 2019-01-25 20:57:00 UTC |
| Description | typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Typora | Typora | 0.8.1 | alpha | All | All |
| Application | Typora | Typora | 0.8.2 | alpha | All | All |
| Application | Typora | Typora | 0.8.5 | alpha | All | All |
| Application | Typora | Typora | 0.8.6 | alpha | All | All |
| Application | Typora | Typora | 0.8.7 | alpha | All | All |
| Application | Typora | Typora | 0.8.8 | beta | All | All |
| Application | Typora | Typora | 0.8.9 | beta | All | All |
| Application | Typora | Typora | 0.9.0 | beta | All | All |
| Application | Typora | Typora | 0.9.1 | beta | All | All |
| Application | Typora | Typora | 0.9.2 | beta | All | All |
| Application | Typora | Typora | 0.9.3 | beta | All | All |
| Application | Typora | Typora | 0.9.4 | beta | All | All |
| Application | Typora | Typora | 0.9.4.5 | beta | All | All |
| Application | Typora | Typora | 0.9.5 | beta | All | All |
| Application | Typora | Typora | 0.9.5.6 | beta | All | All |
| Application | Typora | Typora | 0.9.5.7 | beta | All | All |
| Application | Typora | Typora | 0.9.6 | beta | All | All |
| Application | Typora | Typora | 0.9.6.1 | beta | All | All |
| Application | Typora | Typora | 0.9.6.8 | beta | All | All |
| Application | Typora | Typora | 0.9.7 | beta | All | All |
| Application | Typora | Typora | 0.9.7.4 | beta | All | All |
| Application | Typora | Typora | 0.9.7.5 | beta | All | All |
| Application | Typora | Typora | 0.9.7.8 | beta | All | All |
| Application | Typora | Typora | 0.9.7.9 | beta | All | All |
| Application | Typora | Typora | 0.9.8 | beta | All | All |
| Application | Typora | Typora | 0.9.8.1 | beta | All | All |
| Application | Typora | Typora | 0.9.8.5 | beta | All | All |
| Application | Typora | Typora | 0.9.8.6 | beta | All | All |
| Application | Typora | Typora | 0.9.8.7 | beta | All | All |
| Application | Typora | Typora | 0.9.8.7.2 | beta | All | All |
| Application | Typora | Typora | 0.9.8.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.0 | beta | All | All |
| Application | Typora | Typora | 0.9.9.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.7 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.9 | beta | All | All |
| Application | Typora | Typora | 0.9.9.11 | beta | All | All |
| Application | Typora | Typora | 0.9.9.11.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.12 | beta | All | All |
| Application | Typora | Typora | 0.9.9.12.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.12.5 | All | All | All |
| Application | Typora | Typora | 0.9.9.13 | beta | All | All |
| Application | Typora | Typora | 0.9.9.13.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.14 | beta | All | All |
| Application | Typora | Typora | 0.9.9.15 | beta | All | All |
| Application | Typora | Typora | 0.9.9.15.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.15.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.16 | beta | All | All |
| Application | Typora | Typora | 0.9.9.16.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.16.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.17 | beta | All | All |
| Application | Typora | Typora | 0.9.9.17.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.17.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.18 | beta | All | All |
| Application | Typora | Typora | 0.9.9.18.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.19 | beta | All | All |
| Application | Typora | Typora | 0.9.9.19.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.19.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.2.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.2.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.4.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.5.1 | All | All | All |
| Application | Typora | Typora | 0.9.9.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.6.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.6.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.9 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.0 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.4.2 | beta | All | All |
| Application | Typora | Typora | 0.8.1 | alpha | All | All |
| Application | Typora | Typora | 0.8.2 | alpha | All | All |
| Application | Typora | Typora | 0.8.5 | alpha | All | All |
| Application | Typora | Typora | 0.8.6 | alpha | All | All |
| Application | Typora | Typora | 0.8.7 | alpha | All | All |
| Application | Typora | Typora | 0.8.8 | beta | All | All |
| Application | Typora | Typora | 0.8.9 | beta | All | All |
| Application | Typora | Typora | 0.9.0 | beta | All | All |
| Application | Typora | Typora | 0.9.1 | beta | All | All |
| Application | Typora | Typora | 0.9.2 | beta | All | All |
| Application | Typora | Typora | 0.9.3 | beta | All | All |
| Application | Typora | Typora | 0.9.4 | beta | All | All |
| Application | Typora | Typora | 0.9.4.5 | beta | All | All |
| Application | Typora | Typora | 0.9.5 | beta | All | All |
| Application | Typora | Typora | 0.9.5.6 | beta | All | All |
| Application | Typora | Typora | 0.9.5.7 | beta | All | All |
| Application | Typora | Typora | 0.9.6 | beta | All | All |
| Application | Typora | Typora | 0.9.6.1 | beta | All | All |
| Application | Typora | Typora | 0.9.6.8 | beta | All | All |
| Application | Typora | Typora | 0.9.7 | beta | All | All |
| Application | Typora | Typora | 0.9.7.4 | beta | All | All |
| Application | Typora | Typora | 0.9.7.5 | beta | All | All |
| Application | Typora | Typora | 0.9.7.8 | beta | All | All |
| Application | Typora | Typora | 0.9.7.9 | beta | All | All |
| Application | Typora | Typora | 0.9.8 | beta | All | All |
| Application | Typora | Typora | 0.9.8.1 | beta | All | All |
| Application | Typora | Typora | 0.9.8.5 | beta | All | All |
| Application | Typora | Typora | 0.9.8.6 | beta | All | All |
| Application | Typora | Typora | 0.9.8.7 | beta | All | All |
| Application | Typora | Typora | 0.9.8.7.2 | beta | All | All |
| Application | Typora | Typora | 0.9.8.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.0 | beta | All | All |
| Application | Typora | Typora | 0.9.9.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.7 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.10.9 | beta | All | All |
| Application | Typora | Typora | 0.9.9.11 | beta | All | All |
| Application | Typora | Typora | 0.9.9.11.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.12 | beta | All | All |
| Application | Typora | Typora | 0.9.9.12.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.12.5 | All | All | All |
| Application | Typora | Typora | 0.9.9.13 | beta | All | All |
| Application | Typora | Typora | 0.9.9.13.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.14 | beta | All | All |
| Application | Typora | Typora | 0.9.9.15 | beta | All | All |
| Application | Typora | Typora | 0.9.9.15.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.15.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.16 | beta | All | All |
| Application | Typora | Typora | 0.9.9.16.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.16.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.17 | beta | All | All |
| Application | Typora | Typora | 0.9.9.17.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.17.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.18 | beta | All | All |
| Application | Typora | Typora | 0.9.9.18.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.19 | beta | All | All |
| Application | Typora | Typora | 0.9.9.19.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.19.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.2.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.2.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.20.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.4.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.5.1 | All | All | All |
| Application | Typora | Typora | 0.9.9.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.6.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.6.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7.1 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7.6 | beta | All | All |
| Application | Typora | Typora | 0.9.9.7.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.5 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.8 | beta | All | All |
| Application | Typora | Typora | 0.9.9.8.9 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.0 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.2 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.3 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.4 | beta | All | All |
| Application | Typora | Typora | 0.9.9.9.4.2 | beta | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Typora XSS to RCE · Issue #2124 · typora/typora-issues · GitHub | MISC | github.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.