high8.8Public exploit code
CVE-2023-31874
Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process').
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Yank Note v3.52.1 (Electron) - Arbitrary Code Execution2023-05-23 · local · multiple
Impact
Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process').
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yank-Note | Yank Note | Version 3.52.1 |