Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/notable/notable/issues/1595 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-03-26T23:18:49
Updated: 2024-08-03T04:56:37.912Z
Reserved: 2022-02-28T00:00:00
Link: CVE-2022-26198
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-03-27T00:15:09.497
Modified: 2023-08-08T14:21:49.707
Link: CVE-2022-26198
Redhat
No data.