Electronjs

Records61All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

Electronjs records in CISA KEV

No Electronjs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Zonote · all components

TI-2020-18177 CVE-2020-35717 · GHSA-r776-v6gr-rxfh

MEDIUM 45

zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.03755 Published 2021-01-01 No fix listed CWE-79