Lucene search
Veracode Vulnerability DatabaseVERACODE:36496HistoryJul 26, 2022 - 5:18 a.m.
Cross-site Scripting (XSS)
2022-07-2605:18:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
joplin
cross-site scripting
vulnerability
string-utils.js
malicious javascript
0.002 Low
EPSS
Percentile
53.6%
joplin is vulnerable to cross-site scripting. The vulnerability exists because the surroundKeywords function of string-utils.js does not properly escape the malicious html codes in valueRegex and value parameters, allowing an attacker to inject and execute malicious javascript.
Related
cve
cve
CVE-2022-35131
2022-07-25 21:15:08
cvelist
cvelist
CVE-2022-35131
2022-07-25 20:30:45
osv
osv
Joplin is vulnerable to arbitrary code execution
2022-07-26 00:00:28
CVE-2022-35131
2022-07-25 21:15:08
github
github
Joplin is vulnerable to arbitrary code execution
2022-07-26 00:00:28
prion
prion
Design/Logic Flaw
2022-07-25 21:15:00
nvd
nvd
CVE-2022-35131
2022-07-25 21:15:08