4 matches found
CVE-2022-23340
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results...
9.8CVSS7.6AI score0.01505EPSS
SaveExploits0References1
CVE-2022-23340
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results...
9.8CVSS7.5AI score0.01505EPSS
SaveExploits0References2
CVE-2022-23340
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results...
9.9AI score0.01505EPSS
SaveExploits0References1
CVE-2022-23340
Joplin 2.6.10 is affected by a remote code execution vulnerability where malicious code in user search results can execute system commands. Root cause cited across multiple sources is code injection in the HTML rendering/processing path (stripHtml/html entity handling) enabling command execution....
9.8CVSS9.7AI score0.01505EPSS
SaveExploits0References1Affected Software1
20