CVE-2021-47970

High

Published: 16/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Macaron Notes version 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can generate a payload containing 350000 repeated characters and paste it into a note field to trigger application crash.

Risk Assessment

This vulnerability may lead to application downtime, affecting service availability for users. Organizations could experience disruptions and potential data loss.

Recommendation

It is recommended to update Macaron Notes to the latest version to mitigate this vulnerability. Additionally, implementing character length restrictions in note fields is advisable.

Original NVD description (English source)

Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can generate a payload containing 350000 repeated characters and paste it into a note field to trigger application crash and stop functionality.