CVE-2021-21259

creationtimestamp| type| source ---|---|--- 2021-01-22 20:29:23+00:00| seen| https://t.me/cibsecurity/22526...

CVE-2021-21259

CVE-2021-21259 affects HedgeDoc before version 1.7.2, where an attacker could inject arbitrary JavaScript into a note that is executed when viewed in slide mode. Depending on instance configuration, authentication may not be required to create or edit notes. The issue is fixed in HedgeDoc 1.7.2; ...