Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-42967

XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files

Description

Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

careteditor caret

  • 0 to < *affected

References