| |
Vulnerability CVE-2021-41392
Published: 2021-09-17 Modified: 2021-09-18
Description: |
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API. |
References: |
https://github.com/BoostIO/BoostNote-App/issues/856
|
|
|
Copyright 2024, cxsecurity.com
|
|
|