Lucene search
GoogleOSV:GHSA-7GRW-XFX6-QHX6HistoryJun 30, 2023 - 3:30 p.m.
Joplin Cross-site Scripting vulnerability
2023-06-3015:30:22
Google
osv.dev
8
joplin
cross-site scripting
svg
document
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
38.2%
Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
Related
github
github
Joplin Cross-site Scripting vulnerability
2023-06-30 15:30:22
osv
osv
CVE-2023-37298
2023-06-30 15:15:09
cvelist
cvelist
CVE-2023-37298
2023-06-30 00:00:00
cve
cve
CVE-2023-37298
2023-06-30 15:15:09
nvd
nvd
CVE-2023-37298
2023-06-30 15:15:09
prion
prion
Design/Logic Flaw
2023-06-30 15:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
38.2%
Related for OSV:GHSA-7GRW-XFX6-QHX6