A vulnerability exists in the way Crimson Editor reads file types from within configuration files and can be exploited, by malicious people, to compromise a vulnerable system. Version 3.70 is vulnerable. Proof of concept configuration file included.
8e5e7879cc0de787203305c7bee9d33c
Comments
No comments yet, be the first!