Lucene search
Veracode Vulnerability DatabaseVERACODE:36496HistoryJul 26, 2022 - 5:18 a.m.
Cross-site Scripting (XSS)
2022-07-2605:18:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
joplin
cross-site scripting
vulnerability
string-utils.js
malicious javascript
EPSS
0.002
Percentile
53.6%
joplin is vulnerable to cross-site scripting. The vulnerability exists because the surroundKeywords function of string-utils.js does not properly escape the malicious html codes in valueRegex and value parameters, allowing an attacker to inject and execute malicious javascript.
Related
cvelist
cvelist
CVE-2022-35131
2022-07-25 20:30:45
cve
cve
CVE-2022-35131
2022-07-25 21:15:08
prion
prion
Design/Logic Flaw
2022-07-25 21:15:00
osv
osv
CVE-2022-35131
2022-07-25 21:15:08
Joplin is vulnerable to arbitrary code execution
2022-07-26 00:00:28
github
github
Joplin is vulnerable to arbitrary code execution
2022-07-26 00:00:28
nvd
nvd
CVE-2022-35131
2022-07-25 21:15:08