Joplin vulnerabilities
2 known vulnerabilities in Joplin from Joplinapp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest first
- 9.6 Critical severity
joplin: Improper Neutralization of Input During Web Page Generation
Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote code execution (RCE) when a user clicks on an <a> link within untrusted notes. The issue arises due to insufficient sanitization of <a> tag
- 9.6 Critical severity
joplin: Improper Neutralization of Input During Web Page Generation
Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag.