Beveiligingsadvies

CVE-2024-40643

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-09 14:28:20

Laatst bijgewerkt 2024-09-09 14:52:47

Toegewezen door GitHub_M

CVSS-score 9.7

Status PUBLISHED

Beschrijving

Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to do an XSS by putting an "illegal" tag within a tag.

← Alle CVE's bekijken Bekijk op cve.org ↗