CVE-2017-1000492

Impact

Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/leanote/desktop-app/commit/a2ed226637f8e66c9b089784b5e58eccf2e2fb30
• https://github.com/leanote/leanote/issues/695
• https://github.com/leanote/desktop-app/commit/a2ed226637f8e66c9b089784b5e58eccf2e2fb30
• https://github.com/leanote/leanote/issues/695