caret records
3 published records for vendor caret.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-20269No exploit | A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22.caret · caret | Critical9.8 | — | 4.8% | Jan 26, 2021 |
40Plan | CVE-2019-9927No exploit | Caret before 2019-02-22 allows Remote Code Execution.caret · caret | Critical9.8 | — | 3.6% | Mar 22, 2019 |
38Monitor | CVE-2022-42967No exploit | XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown filescaret · caret · CWE-79 | Critical9.6 | — | 0.8% | Jan 11, 2023 |
- CVE-2020-2026940Plan
A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22.
CriticalCVSS 9.8No exploitEPSS 4%caret · caretJan 26, 2021
- CVE-2019-992740Plan
Caret before 2019-02-22 allows Remote Code Execution.
CriticalCVSS 9.8No exploitEPSS 3%caret · caretMar 22, 2019
- CVE-2022-4296738Monitor
XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files
CriticalCVSS 9.6No exploitEPSS 0%caret · caretJan 11, 2023