exploitDog

CVE-2021-43721

Опубликовано: 28 мар. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <video src=x onerror=(function(){require('child_process').exec('calc');})();>

Ссылки

https://github.com/leanote/desktop-app/issues/364
Exploit
Issue Tracking
Third Party Advisory
https://github.com/leanote/desktop-app/issues/364
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:leanote:leanote:2.7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00428

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-8mh9-7j76-5m8p

CVSS3: 6.1

github

почти 4 года назад

Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <video src=x onerror=(function(){require('child_process').exec('calc');})();>

EPSS

Процентиль: 62%

0.00428

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79