Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12136
3.5
LOWCVSS v2
Published
May 16, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element.
BoostIO/BoostNote-Legacy
GitHubThis repository is outdated and new Boost Note app is available! We've launched a new Boost Note app which supports real-time collaborative writing. https://github.com/BoostIO/BoostNote-App
GitHubThis repository is outdated and new Boost Note app is available! We've launched a new Boost Note app which supports real-time collaborative writing. https://github.com/BoostIO/BoostNote-AppNVD