未評価
Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
CVE-2020-16608
SecPulse初出
参照URL
- advisory github.com
- report sghosh2402.medium.com