Known Vulnerabilities for products from Joplin Project
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Joplin Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-37299 json | Joplin before 2.11.5 allows XSS via an AREA element of an image map. | 6.1 - MEDIUM | 2023-06-30 | 2023-07-06 |
| CVE-2023-37298 json | Joplin before 2.11.5 allows XSS via a USE element in an SVG document. | 6.1 - MEDIUM | 2023-06-30 | 2023-07-06 |
| CVE-2022-45598 json | Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via imprope... | 6.1 - MEDIUM | 2023-01-31 | 2023-02-07 |
| CVE-2022-23340 json | Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results. | 9.8 - CRITICAL | 2022-02-08 | 2022-02-11 |
| CVE-2021-37916 json | Joplin before 2.0.9 allows XSS via button and form in the note body. | 6.1 - MEDIUM | 2021-08-03 | 2021-08-06 |
| CVE-2021-33295 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.4 - MEDIUM | 2022-06-16 | 2022-06-27 |
| CVE-2020-28249 json | Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note. | 6.1 - MEDIUM | 2020-11-06 | 2020-11-12 |
| CVE-2020-15930 json | An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag. | 6.1 - MEDIUM | 2020-09-24 | 2020-09-29 |
| CVE-2020-9038 json | Joplin through 1.0.184 allows Arbitrary File Read via XSS. | 5.4 - MEDIUM | 2020-02-17 | 2021-12-30 |
| CVE-2018-1000534 json | Joplin version prior to 1.0.90 contains a XSS evolving into code execution due to enabled nodeIntegration for that particular... | 6.1 - MEDIUM | 2018-06-26 | 2018-08-21 |
Known software with vulnerabilities from Joplin Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Joplin Project | Joplin | - |