joplin project joplin vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

Joplin up to and including 1.0.184 allows Arbitrary File Read via XSS.

Joplin Project Joplin

1 EDB exploit1 Github repository

6.1

CVSSv3

Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows malicious user to execute arbitrary code via improper santization.

Joplin Project Joplin

6.1

CVSSv3

Joplin prior to 2.11.5 allows XSS via a USE element in an SVG document.

Joplin Project Joplin

6.1

CVSSv3

Joplin prior to 2.11.5 allows XSS via an AREA element of an image map.

Joplin Project Joplin

5.4

CVSSv3

Cross Site Scripting (XSS) vulnerability in Joplin Desktop App prior to 1.8.5 allows malicious users to execute aribrary code due to improper sanitizing of html.

Joplin Project Joplin

6.1

CVSSv3

Joplin prior to 2.0.9 allows XSS via button and form in the note body.

Joplin Project Joplin

6.1

CVSSv3

An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.

Joplin Project Joplin

6.1

CVSSv3

Joplin version before 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular BrowserWindow instance where XSS was identified from vulnerability in Note content field - information on the fix can be found here https://github.com/laure...

Joplin Project Joplin

6.1

CVSSv3

Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

Joplin Project Joplin 1.2.6

1 Github repository

9.8

CVSSv3

Joplin 2.6.10 allows remote malicious users to execute system commands through malicious code in user search results.

Joplin Project Joplin 2.6.10

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook