~ / search / GHSA-gjwp-7v3g-99pj

GHSA-gjwp-7v3g-99pj

Cross-site Request Forgery (CSRF) in joplin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23431

Packages

EcosystemPackageAffectedFixed in
npm joplin < 2.3.2 2.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.

References

External links from the advisory. They lead to third-party sites.