Description (CNA)
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| sticky-notes-color-widgets / Sticky Notes Color Widgets | affected 1.4.2 |
CWE
CWE-789
References
- https://www.exploit-db.com/exploits/49957
- https://www.vulncheck.com/advisories/sticky-notes-color-widgets-denial-of-service
ADP enrichment
No English description supplied.
No references supplied.