BoostIO/BoostNote-App

Releases133

Frequency2 weeks 19 hours

Last Release about 4 years ago

Stars4.05K

Boost Note is a document driven project management tool that maximizes remote DevOps team velocity.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-41392 ↗	Sep 17, 2021Friday, 17 September 2021, 22:15	9.8 CRITICAL	7.5 HIGH
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.