Leanote Desktop
2 CVEs affecting Leanote Desktop. Latest disclosed: 2024-02-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000492 | Medium | 6.1 | 2018-01-03 | Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration |
CVE-2024-0849 | Medium | 5.0 | 2024-02-07 | Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR. |