Vendor
The noname Electron desktop application (versions 1.11.2 to 1.11.6.1) contains an unauthenticated local file server on port 8089 with wildcard CORS, allowing remote attackers to achieve code execution via malicious cross-origin requests.