Lucene search

GoogleOSV:CVE-2022-35131

HistoryJul 25, 2022 - 9:15 p.m.

CVE-2022-35131

2022-07-2521:15:08

Google

osv.dev

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

CPENameOperatorVersion
joplineq1.0.181
joplineqandroid-v1.0.253
joplineqandroid-v0.10.79
joplineq1.0.113
joplineqandroid-v1.0.319-rc1
joplineqandroid-v1.0.269
joplineq2.8.4
joplineqcli-v1.0.110
joplineqclipper-1.0.8
joplineqserver-v2.0.2

Name	Operator	Version
joplin	eq	1.0.181
joplin	eq	android-v1.0.253
joplin	eq	android-v0.10.79
joplin	eq	1.0.113
joplin	eq	android-v1.0.319-rc1
joplin	eq	android-v1.0.269
joplin	eq	2.8.4
joplin	eq	cli-v1.0.110
joplin	eq	clipper-1.0.8
joplin	eq	server-v2.0.2

Rows per page:

1-10 of 8761

References

joplin.com

github.com/laurent22/joplin/releases/tag/v2.9.1

github.com/ly1g3/Joplin-CVE-2022-35131

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

Related for OSV:CVE-2022-35131