未評価
zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).
CVE-2020-35717
SecPulse初出
参照URL
- advisory electronjs.org
- package github.com
- report github.com
- report medium.com