Vendor
TriliumNext
14 known vulnerabilities.
Products
4 results · Clear filters · Feed
-
Critical 9.3
Trilium: Note Import to RCE via Book Note
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and l…
-
Critical 9.3
Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitizati…
-
Critical 9.3
Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rende…
-
Critical 9.3
Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.102.2, a malicious ZIP archive imported with safe import enabled achieves RCE via #docName path traversal and XSS by combini…