CVE-2020-26157

2020-09-3003:35:52

mitre

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.006

Percentile

79.6%

JSON

Leanote Desktop through 2.6.2 allows XSS because a note’s title is mishandled during syncing. This leads to remote code execution because of Node integration.

References

github.com/leanote/desktop-app/issues/353