CVE-2018-10994

Published May 14th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL.

signalapp/Signal-Desktop

A private messenger for Windows, macOS, and Linux.

GitHub

16.3K