CVE-2018-1000536

Medis (version 0.6.1 and earlier) contains a cross-site scripting vulnerability that can evolve into code execution due to an enabled nodeIntegration setting in the renderer process. The flaw is triggered via the Key name parameter on new key creation and can enable unauthorized code execution on...