CyberRota Analysis
AI-GeneratedThe vulnerability affects the Trilium note-taking application, specifically in versions up to 0.103.0, where the "Safe import" filter fails to sanitize mind map note types, allowing attackers to embed malicious HTML payloads. This can lead to cross-site scripting (XSS) that escalates to full remote code execution on the victim's machine due to Node integration in the Electron renderer. Organizations using affected versions should prioritize upgrading to version 0.104.0 to mitigate this critical risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied import archive to embed a payload that renders as arbitrary HTML. A mind map node can carry a dangerouslySetInnerHTML property that the Mind Elixir library assigns directly to a node's innerHTML, so a malicious note survives Safe import and executes script as soon as the victim opens the imported mind map. On the desktop client the Electron renderer runs with Node integration enabled, so the injected JavaScript escalates from cross-site scripting to full remote code execution on the victim's machine. This issue is fixed in version 0.104.0.