Threats tagged 'ghsa-44mq-cghw-wf5x'

Open Notebook version 1.8.1 contains an improper input validation vulnerability combined with an overly permissive default CORS configuration. This flaw allows a remote attacker to trick a legitimate user into altering or deleting arbitrary database entries via a specially crafted malicious URL. Depending on the deployment environment, the vulnerability may also enable data exfiltration.