CVE-2022-42967 — XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files

CVE-2022-42967

XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files PUBLISHED

Description (CNA)

Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution.

Affected (CNA)

Vendor / product	Versions
careteditor / caret	affected 0 before *

CWE

CWE-79

References

https://research.jfrog.com/vulnerabilities/caret-xss-rce/

ADP enrichment

CVE

No English description supplied.

https://research.jfrog.com/vulnerabilities/caret-xss-rce/

CISA-ADP

No English description supplied.

No references supplied.