CVE-2021-47972

High

Published: 16/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Sticky Notes & Color Widgets version 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes.

Risk Assessment

This vulnerability can lead to application downtime, affecting service availability for users. Attackers may exploit this flaw to disrupt organizational operations.

Recommendation

It is recommended to update the application to the latest version to mitigate this vulnerability. Additionally, implementing restrictions on the length of input strings in note fields is advisable.

Original NVD description (English source)

Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.