CVE-2021-33295 in Joplin Desktop App

Sumário

de MITRE • 17/06/2022

Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 20/05/2021
• Divulgação: 17/06/2022
• Moderação: aceite
• Entrada: VDB-202325
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00806
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-33295
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-33295
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-33295/