CVE-2022-40276

Published: Nov 3, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Zettlr version 2.3.0 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Zettlr. This is possible because the application does not have a CSP policy (or at least not strict enough) and/or does not properly validate the contents of markdown files before rendering them.

Affected (1)

Products: Zettlr: Zettlr

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zettlr Zettlr	Version 2.3.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://fluidattacks.com/advisories/avicii/

Source: help@fluidattacks.com

ExploitThird Party Advisory

https://github.com/Zettlr/Zettlr

Source: help@fluidattacks.com

ProductThird Party Advisory

https://fluidattacks.com/advisories/avicii/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/Zettlr/Zettlr

Source: af854a3a-2127-422b-91ae-364da2661108

ProductThird Party Advisory

Timeline

No history available yet.