Joplin Security Vulnerabilities and Issues — Joplin CVE List

Lucene search

Joplin ProjectJoplin

2 matches found

CVE•added 2022/06/16 9:15 p.m.•55 views

CVE-2021-33295

Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html.

5.4CVSS5.3AI score0.0025EPSS

CVE•added 2022/02/08 2:15 p.m.•46 views

CVE-2022-23340

Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.

9.8CVSS9.7AI score0.00611EPSS