joplin vulnerabilities

2 known vulnerabilities in joplin from Laurent 22. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  joplin: Improper Control of Generation of Code

  CVE-2024-53268Nov 25, 2024Laurent22

  Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and iOS. In affected versions attackers are able to abuse the fact that openExternal is used without any filtering of URI schemes to obtain remo

• 9.0 Critical severity

  joplin: Improper Control of Generation of Code

  CVE-2023-45673Jun 21, 2024Laurent22EPSS 1.03%

  Joplin is a free, open source note taking and to-do application. A remote code execution (RCE) vulnerability in affected versions allows clicking on a link in a PDF in an untrusted note to execute arbitrary shell commands. Clicking links in PDFs allows for arb