Sticky Notes & Color Widgets 1.4.2 Denial of Service
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 0.3%
exploitation probability
0.3%top 79% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
sticky-notes-color-widgets · Sticky Notes Color Widgetspublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/49957unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.