2018-05-14 23:00:00
mitre
PUBLISHED
js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL.