Attacker is able to create,Edit & delete notes and leak the title of a victim’s private personal snippet