Boostnote: >> Boostnote >> 0.1.0-2 Security Vulnerabilities
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.
CVSS Score
9.8
EPSS Score
0.071
Published
2021-09-17