showdownjs/showdown · Security
Reverse Tabnabbing in showdown
- GHSA ID
- GHSA-h6mq-3cj6-h738
- Severity
- low
- Published
- Updated
- CVSS
- 3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS v3
- 3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
Versions of showdown prior to 1.9.1 are vulnerable to Reverse Tabnabbing. The package uses target='_blank' in anchor tags, allowing attackers to access window.opener for the original page when opening links. This is commonly used for phishing attacks.
Recommendation
Upgrade to version 1.9.1 or later.
CWEs
- CWE-1022 · Use of Web Link to Untrusted Target with window.opener Access