Mayneyao

**Name of the Vulnerable Software and Affected Versions** Eidos versions 0.21.0 and below **Description** Eidos is a framework for Personal Data Management. Versions 0.21.0 and below have a remote code execution issue. An attacker can trigger this by embedding a specially crafted `eidos:` URL on a website. When a victim visits the site or clicks the link, the Eidos application launches and processes the URL, resulting in remote code execution on the victim’s machine. The issue involves the application’s custom URL handler (`eidos:`). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.