Description
Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | joplin | < 2.7.1 | 2.7.1 | GHSA-8478-53pv-jxvm |
Critical · 9.8
CVE-2022-23340
EUVD-2022-0903GHSA-8478-53pv-jxvm
Joplin Vulnerable to Code Injection
Published Feb 8, 2022 · Updated Aug 3, 2024 · Assigned by mitre