CVE-2021-47971
HighSummary
My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an application crash.
Risk Assessment
This vulnerability may lead to application downtime, affecting user productivity. Organizations should be aware of the risk associated with potential attacks that could disrupt system operations.
Recommendation
It is recommended to update to the latest version of My Notes Safe to mitigate this vulnerability. Additionally, implementing input length restrictions in note fields is advisable.
Original NVD description (English source)
My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an application crash.