Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Zettlr Clear all filters
TI-2022-19117 CVE-2022-40276 · GHSA-gq8w-3h98-m48x

Improper input validation in Zettlr

Priority LOW 25

Zettlr version 2.3.0 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Zettlr.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00391 Published 2022-11-03 No fix listed CWE-20
TI-2021-03953 CVE-2021-20727 · GHSA-vwf2-95mj-6g95

Cross-site scripting in Hendrik Erz Zettlr

Priority LOW 29

Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01036 Published 2021-05-27 No fix listed CWE-79