{"vulnerability": "cve-2020-7750", "sightings": [{"uuid": "ef755ca9-43da-4f7c-accb-25949c823d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7750", "type": "seen", "source": "MISP/4b871962-89dc-44f5-8576-8275974b7453", "content": "", "creation_timestamp": "2024-11-14T06:09:12.000000Z"}, {"uuid": "756f9284-dc01-4663-bc25-15b69a83ffb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7750", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/736", "content": "CVE-2020-7750 Scratch Desktop 3.17 XSS&RCE\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-7750_Scratch_Desktop_3.17_XSS%26RCE%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T04:42:19.000000Z"}, {"uuid": "85def5de-a1b0-42f8-8162-fdf3b403d88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7750", "type": "seen", "source": "https://t.me/hacking_Attack/15136", "content": "Exploit Collector\nScratch Desktop 3.17 Code Execution / Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nScratch Desktop version 3.17 suffers from code execution and cross site scripting vulnerabilities.\n\nMD5 | 23c78ef8227eedadfbcfb2af4ec8debc\n\nDownload\n# Exploit Title: Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)\n# Google Dork: 'inurl:\"/projects/editor/?tutorial=getStarted\" -mit.edu' (not foolproof on versioning)\n# Date: 2021-06-18\n# Exploit Author: Stig Magnus Baugst\u00f8\n# Vendor Homepage: https://scratch.mit.edu/\n# Software Link: https://web.archive.org/web/20210225011334/https://downloads.scratch.mit.edu/desktop/Scratch%20Desktop%20Setup%203.10.2.exe\n# Version: 3.10.2\n# Tested on: Windows 10 x64, but should be platform independent.\n# CVE: CVE-2020-7750\n\nScratch cross-site scripting (XSS) & Scratch Desktop remote code execution (XSS/RCE) <3.17.1\n\nCVE-2020-7750 was disclosed on Scratch's official forums on 21th of October 2020 by the forum user apple502j. The forum thread describes a cross-site scripting (XSS) vulnerability in Scratch and Scratch Desktop prior to 3.17.1: https://scratch.mit.edu/discuss/topic/449794/\n\nYou can exploit the vulnerability by uploading a SVG (*.svg) file WITHOUT the viewBox attribute and embedding a malicious event handler. Example:\n\n<svg\n<image\nThe malicious SVG can be uploaded as a sprite or stored within a Scratch project file (*.sb3), which is a regular ZIP archive by the way.\n\nExample of regular cross-site scripting (XSS):\n\n<svg\n<image\nThe Scratch Desktop versions runs on Electron where the exploit can be used for remote code execution (RCE):\n\n<svg\n<image\nThe example above launches cmd.exe (Command Prompt) on Windows.\n\nFor a full walkthrough and explanation of the exploit, please see the following blog post by the exploit's author: https://www.mnemonic.no/blog/exploiting-scratch-with-a-malicious-image/\n\nNote that the author of this exploit does not take credit for finding the vulnerability. The vulnerability was disclosed by user apple502j on Scratch's official forums.\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:34.406111Z"}, {"uuid": "adf5b722-cdd8-45cb-97df-9e420136b654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7750", "type": "seen", "source": "https://t.me/hacking_Attack/15136", "content": "Exploit Collector\nScratch Desktop 3.17 Code Execution / Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-hp3wB9AXd0k/WWlvDY5V44I/AAAAAAAAIKs/ScSIhWVAvDAhjeMkIwqbNby9r3gKQvOEgCLcBGAs/s1600/h128.png \nScratch Desktop version 3.17 suffers from code execution and cross site scripting vulnerabilities.\n\nMD5 | 23c78ef8227eedadfbcfb2af4ec8debc\n\nDownload\n# Exploit Title: Scratch Desktop 3.17 - Cross-Site Scripting/Remote Code Execution (XSS/RCE)\n# Google Dork: 'inurl:\"/projects/editor/?tutorial=getStarted\" -mit.edu' (not foolproof on versioning)\n# Date: 2021-06-18\n# Exploit Author: Stig Magnus Baugst\u00f8\n# Vendor Homepage: https://scratch.mit.edu/\n# Software Link: https://web.archive.org/web/20210225011334/https://downloads.scratch.mit.edu/desktop/Scratch%20Desktop%20Setup%203.10.2.exe\n# Version: 3.10.2\n# Tested on: Windows 10 x64, but should be platform independent.\n# CVE: CVE-2020-7750\n\nScratch cross-site scripting (XSS) & Scratch Desktop remote code execution (XSS/RCE) <3.17.1\n\nCVE-2020-7750 was disclosed on Scratch's official forums on 21th of October 2020 by the forum user apple502j. The forum thread describes a cross-site scripting (XSS) vulnerability in Scratch and Scratch Desktop prior to 3.17.1: https://scratch.mit.edu/discuss/topic/449794/\n\nYou can exploit the vulnerability by uploading a SVG (*.svg) file WITHOUT the viewBox attribute and embedding a malicious event handler. Example:\n\n<svg\n<image\nThe malicious SVG can be uploaded as a sprite or stored within a Scratch project file (*.sb3), which is a regular ZIP archive by the way.\n\nExample of regular cross-site scripting (XSS):\n\n<svg\n<image\nThe Scratch Desktop versions runs on Electron where the exploit can be used for remote code execution (RCE):\n\n<svg\n<image\nThe example above launches cmd.exe (Command Prompt) on Windows.\n\nFor a full walkthrough and explanation of the exploit, please see the following blog post by the exploit's author: https://www.mnemonic.no/blog/exploiting-scratch-with-a-malicious-image/\n\nNote that the author of this exploit does not take credit for finding the vulnerability. The vulnerability was disclosed by user apple502j on Scratch's official forums.\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:09.090698Z"}]}