notable/notable-insiders

notable/notable-insiders

GitHubGitHub
GitHubgithub.com
Releases32
Frequency5 days 13 hours
Last Release
Stars184
A repository containing experimental releases of Notable.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-29281↗
8.8 HIGH6.8 MEDIUM

Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program (or theft of NTLM credentials via an SMB relay attack, because the application resolves UNC paths).