CVE:CVE-2020-20269
CNNVD:CNNVD-202101-2039
Caret Editor是Caret公司的一个Markdown文件编辑器。
Caret Editor before 4.0.0-rc22 存在输入验证错误漏洞，该漏洞源于一个特别制作的Markdown文档可能会导致在插入符号编辑器中执行恶意JavaScript代码。
solution:Upgrade caret caret to a higher version than 3.4.6,4.0.0:beta0,4.0.0:beta1,4.0.0:beta2,4.0.0:beta3,4.0.0:beta4,4.0.0:beta5,4.0.0:beta6,4.0.0:beta7,4.0.0:beta8,4.0.0:beta9,4.0.0:rc1,4.0.0:rc10,4.0.0:rc11,4.0.0:rc12,4.0.0:rc13,4.0.0:rc14,4.0.0:rc15,4.0.0:rc16,4.0.0:rc17,4.0.0:rc18,4.0.0:rc19,4.0.0:rc2,4.0.0:rc20,4.0.0:rc21,and avoid the version (,3.4.6],4.0.0:beta0,4.0.0:beta1,4.0.0:beta2,4.0.0:beta3,4.0.0:beta4,4.0.0:beta5,4.0.0:beta6,4.0.0:beta7,4.0.0:beta8,4.0.0:beta9,4.0.0:rc1,4.0.0:rc10,4.0.0:rc11,4.0.0:rc12,4.0.0:rc13,4.0.0:rc14,4.0.0:rc15,4.0.0:rc16,4.0.0:rc17,4.0.0:rc18,4.0.0:rc19,4.0.0:rc2,4.0.0:rc20,4.0.0:rc21