CVE-2019-12592

MEDIO 6.1CVE-2019-12592 · Published 18/06/2019 · updated 17/06/2026

En resumen

CVE-2019-12592 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a web clipper (evernote).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 65.0% de las vulnerabilidades.
Solución: actualizar a 7.11.1 o posterior.

Package	Affected versions	Patched versions
web clipper evernote	`< 7.11.1`	`7.11.1`

Description

A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome allows remote attackers to run arbitrary web script or HTML in the context of any loaded 3rd-party IFrame.

References

cyberscoop.com/evernote-patches-flaw-google-chrome-extension · Press/Media Coverage
techrepublic.com/article/evernote-chrome-extension-vulnerability-allowed-attackers-to-steal-4-7m-users-data · Press/Media Coverage

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free