CVE-2020-16608

Published December 10th, 2020

View on NVD ↗

CVSS v3

9.6

CRITICAL

CVSS v2

9.3

HIGH

Affected

1

PROJECT

Description

Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).

notable/notable

The Markdown-based note-taking app that doesn't suck.

GitHub

23.5K