Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-12137

Description

Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.

POC

Reference

- http://packetstormsecurity.com/files/153082/Typora-0.9.9.24.6-Directory-Traversal.html

- https://github.com/typora/typora-issues/issues/2505

Github

No PoCs found on GitHub currently.