CVE-2020-26157

概要

参考情報

• leanote/desktop-app · Third Party Advisory

leanote のその他の脆弱性

• CVE-2021-4263中 6.1A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file pu…
• CVE-2021-43721中 6.1Leanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads to remote code execution with payload : <vid…
• CVE-2020-26158緊急 9.6Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code…
• CVE-2019-1010003中 6.1Leanote prior to version 2.6 is affected by: Cross Site Scripting (XSS).
• CVE-2018-18553中 6.1Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.