CVE-2020-35717

Publication date

2021-01-01 09:15:21

Family

mitre

State

PUBLISHED

Description

zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).