CVE-2023-2318 : DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows

DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText.

Published 2023-08-19 06:15:47

Updated 2023-08-24 14:36:07

Source STAR Labs SG Pte. Ltd.

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Exploit prediction scoring system (EPSS) score for CVE-2023-2318

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-2318

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
8.6	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	1.8	6.0	STAR Labs SG Pte. Ltd.
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: High Integrity: High Availability: High
9.6	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	2.8	6.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-2318

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Assigned by:

info@starlabs.sg (Secondary)
nvd@nist.gov (Primary)

References for CVE-2023-2318

https://starlabs.sg/advisories/23/23-2318/

(CVE-2023-2318) MarkText DOM-Based Cross-site Scripting leading to Remote Code Execution | STAR Labs
Exploit;Third Party Advisory
https://github.com/marktext/marktext/issues/3618

Security Issue: DOM-Based XSS leading to RCE · Issue #3618 · marktext/marktext · GitHub
Exploit;Issue Tracking

Products affected by CVE-2023-2318

Marktext » Marktext
Versions up to, including, (<=) 0.17.1
cpe:2.3:a:marktext:marktext:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A

Vulnerability Details : CVE-2023-2318

Exploit prediction scoring system (EPSS) score for CVE-2023-2318

CVSS scores for CVE-2023-2318

CWE ids for CVE-2023-2318

References for CVE-2023-2318

Products affected by CVE-2023-2318