~ / search / GHSA-8478-53pv-jxvm

GHSA-8478-53pv-jxvm

Joplin Vulnerable to Code Injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-23340

Packages

EcosystemPackageAffectedFixed in
npm joplin < 2.7.1 2.7.1

Details

As written in the advisory (Markdown source, shown as plain text).

Joplin prior to version 2.7.1 allows remote attackers to execute system commands through malicious code in user search results.

References

External links from the advisory. They lead to third-party sites.