critical9.0
CVE-2022-28101
Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.
Impact
Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lyonbros | Turtl | Version 0.7.2.6 |