4 matches found
demo-joplin (>=1.0.1 <=1.0.8) potentially affected by CVE-2021-23431 via joplin (=0.10.93)
joplin NPM version =0.10.93 is affected by a known vulnerability. The following packages have a transitive dependency on joplin and may be impacted: - demo-joplin =1.0.1, =1.0.8 Source cves: CVE-2021-23431 Source advisory: OSV:GHSA-GJWP-7V3G-99PJ...
CVE-2021-23431
The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery CSRF due to missing CSRF checks in various forms...
CVE-2021-23431
The CVE pertains to the open-source note-taking app joplin (pre-2.3.2) vulnerable to Cross-site Request Forgery (CSRF) caused by missing CSRF checks in various forms. Affected versions are prior to 2.3.2; no explicit exploit details are provided in the initial documents, only that the vulnerabili...
