CVE-2018-19286 The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value (along with an arbitrary username value), and then creating and sharing a note.
MediumCVSS 6.1
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value (along with an arbitrary username value), and then creating and sharing a note.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mubu curtain | = 2018-11-11 | No fix listed |
References
- github.com exploit third-party-advisory