Notegen
Monthly
Command injection in NoteGen before 0.32.0 allows remote code execution when an attacker can execute JavaScript in the application webview. The default Tauri shell plugin capability permits execution of bash, python, and python3 with arbitrary arguments, enabling the webview to run OS commands with the app's privileges, typically leading to full host compromise via cross-site scripting.
Cross-site scripting in NoteGen before 0.32.0 allows malicious AI model responses to execute arbitrary JavaScript in the privileged Tauri webview. The application renders chat output with markdown-it configured to allow raw HTML and injects it unsanitized via dangerouslySetInnerHTML, so an attacker who controls the model prompt (e.g., through a weaponized skill file) can trigger script execution when the user views the response. No active exploitation is known, but a public proof of concept is available, and the vulnerability has a high severity CVSS score of 8.1.
Command injection in NoteGen before 0.32.0 allows remote code execution when an attacker can execute JavaScript in the application webview. The default Tauri shell plugin capability permits execution of bash, python, and python3 with arbitrary arguments, enabling the webview to run OS commands with the app's privileges, typically leading to full host compromise via cross-site scripting.
Cross-site scripting in NoteGen before 0.32.0 allows malicious AI model responses to execute arbitrary JavaScript in the privileged Tauri webview. The application renders chat output with markdown-it configured to allow raw HTML and injects it unsanitized via dangerouslySetInnerHTML, so an attacker who controls the model prompt (e.g., through a weaponized skill file) can trigger script execution when the user views the response. No active exploitation is known, but a public proof of concept is available, and the vulnerability has a high severity CVSS score of 8.1.