Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2021-47969

Color Notes 1.4 Denial of Service via Long Character String

Description

Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350,000 repeated characters and paste it twice into a new note to cause the application to stop responding.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

color-notes Color Notes

  • 1.4affected

References