Joplinapp vulnerabilities
We track 2 vulnerabilities in Joplinapp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2024.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest Joplinapp vulnerabilities
- 9.6 Critical severity
joplin: Improper Neutralization of Input During Web Page Generation
Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote code execution (RCE) when a user clicks on an <a> link within untrusted notes. The issue arises due to insufficient sanitization of <a> tag
- 9.6 Critical severity
joplin: Improper Neutralization of Input During Web Page Generation
Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag.