Approved changes feed: RSS · Atom

cpe:2.3:a:electronjs:zonote:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorElectronjs (2af93ff4-38f6-5aef-acc5-80ca92aa0b83)
ProductZonote (31665088-9fce-52ff-be52-5e51386b1dfe)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35717 vulnerable 2026-06-08 05:25:01.584250 Details available
zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true).
Published: 2021-01-01T09:15:21.000Z
Updated: 2024-08-04T17:09:15.140Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.