Notesnook Desktop vulnerabilities
3 known vulnerabilities in Notesnook Desktop from Streetwriters. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.6 Critical severity
notesnook: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution
- 9.6 Critical severity
Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Android/iOS, a stored XSS in the Web Clipper rendering flow can be escalated to remote code execution in the desktop app. The root cause is that the clipper preserves attacker
- 8.6 High severity
Notesnook Web/Desktop: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scripting vulnerability stored in the note history comparison viewer can escalate to remote code execution in a desktop application. The issue is triggered when an attacker-co