Lucene search

K
osvGoogleOSV:GHSA-8478-53PV-JXVM
HistoryFeb 09, 2022 - 12:00 a.m.

Joplin Vulnerable to Code Injection

2022-02-0900:00:29
Google
osv.dev
3
joplin
version 2.7.1
remote attackers
system commands
malicious code
search
software

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

73.8%

Joplin prior to version 2.7.1 allows remote attackers to execute system commands through malicious code in user search results.

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

73.8%

Related for OSV:GHSA-8478-53PV-JXVM