CVE-2021-47972: high-severity vulnerability in sticky-notes-color-widgets Sticky Notes Color…
Sticky Notes & Color Widgets 1.4.2 Denial of Service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.7epss 0.3%
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
sticky-notes-color-widgets · Sticky Notes Color Widgetspublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/49957unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.