CVE Vulnerabilities

CVE-2020-20269

Published: Jan 26, 2021 | Modified: Jan 30, 2021
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22.

Affected Software

Name Vendor Start Version End Version
Caret Caret * 3.4.6 (including)
Caret Caret 4.0.0-beta0 (including) 4.0.0-beta0 (including)
Caret Caret 4.0.0-beta1 (including) 4.0.0-beta1 (including)
Caret Caret 4.0.0-beta2 (including) 4.0.0-beta2 (including)
Caret Caret 4.0.0-beta3 (including) 4.0.0-beta3 (including)
Caret Caret 4.0.0-beta4 (including) 4.0.0-beta4 (including)
Caret Caret 4.0.0-beta5 (including) 4.0.0-beta5 (including)
Caret Caret 4.0.0-beta6 (including) 4.0.0-beta6 (including)
Caret Caret 4.0.0-beta7 (including) 4.0.0-beta7 (including)
Caret Caret 4.0.0-beta8 (including) 4.0.0-beta8 (including)
Caret Caret 4.0.0-beta9 (including) 4.0.0-beta9 (including)
Caret Caret 4.0.0-rc1 (including) 4.0.0-rc1 (including)
Caret Caret 4.0.0-rc10 (including) 4.0.0-rc10 (including)
Caret Caret 4.0.0-rc11 (including) 4.0.0-rc11 (including)
Caret Caret 4.0.0-rc12 (including) 4.0.0-rc12 (including)
Caret Caret 4.0.0-rc13 (including) 4.0.0-rc13 (including)
Caret Caret 4.0.0-rc14 (including) 4.0.0-rc14 (including)
Caret Caret 4.0.0-rc15 (including) 4.0.0-rc15 (including)
Caret Caret 4.0.0-rc16 (including) 4.0.0-rc16 (including)
Caret Caret 4.0.0-rc17 (including) 4.0.0-rc17 (including)
Caret Caret 4.0.0-rc18 (including) 4.0.0-rc18 (including)
Caret Caret 4.0.0-rc19 (including) 4.0.0-rc19 (including)
Caret Caret 4.0.0-rc2 (including) 4.0.0-rc2 (including)
Caret Caret 4.0.0-rc20 (including) 4.0.0-rc20 (including)
Caret Caret 4.0.0-rc21 (including) 4.0.0-rc21 (including)

References