CRITICAL🇵🇱 Wersja polska

CVE-2022-35131

CVSS 9.0v3.1pub. 2022-07-25upd. 2026-07-05

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  • Joplinapp Joplin

    APP
    Joplinapp
    2.8.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2026-22810HIGH8.2ten sam produkt

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Vers...

CVE-2022-40277HIGH7.8ten sam produkt

Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that ope...

CVE-2021-23431MEDIUM5.4ten sam produkt

The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks...