{"uuid": "85def5de-a1b0-42f8-8162-fdf3b403d88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7750", "type": "seen", "source": "https://t.me/hacking_Attack/15136", "content": "Exploit Collector\nScratch Desktop 3.17 Code Execution / Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nScratch Desktop version 3.17 suffers from code execution and cross site scripting vulnerabilities.\n\nMD5 | 23c78ef8227eedadfbcfb2af4ec8debc\n\nDownload\n# Exploit Title: Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)\n# Google Dork: 'inurl:\"/projects/editor/?tutorial=getStarted\" -mit.edu' (not foolproof on versioning)\n# Date: 2021-06-18\n# Exploit Author: Stig Magnus Baugst\u00f8\n# Vendor Homepage: https://scratch.mit.edu/\n# Software Link: https://web.archive.org/web/20210225011334/https://downloads.scratch.mit.edu/desktop/Scratch%20Desktop%20Setup%203.10.2.exe\n# Version: 3.10.2\n# Tested on: Windows 10 x64, but should be platform independent.\n# CVE: CVE-2020-7750\n\nScratch cross-site scripting (XSS) & Scratch Desktop remote code execution (XSS/RCE) <3.17.1\n\nCVE-2020-7750 was disclosed on Scratch's official forums on 21th of October 2020 by the forum user apple502j. The forum thread describes a cross-site scripting (XSS) vulnerability in Scratch and Scratch Desktop prior to 3.17.1: https://scratch.mit.edu/discuss/topic/449794/\n\nYou can exploit the vulnerability by uploading a SVG (*.svg) file WITHOUT the viewBox attribute and embedding a malicious event handler. Example:\n\n<svg\n<image\nThe malicious SVG can be uploaded as a sprite or stored within a Scratch project file (*.sb3), which is a regular ZIP archive by the way.\n\nExample of regular cross-site scripting (XSS):\n\n<svg\n<image\nThe Scratch Desktop versions runs on Electron where the exploit can be used for remote code execution (RCE):\n\n<svg\n<image\nThe example above launches cmd.exe (Command Prompt) on Windows.\n\nFor a full walkthrough and explanation of the exploit, please see the following blog post by the exploit's author: https://www.mnemonic.no/blog/exploiting-scratch-with-a-malicious-image/\n\nNote that the author of this exploit does not take credit for finding the vulnerability. The vulnerability was disclosed by user apple502j on Scratch's official forums.\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:34.406111Z"}