En resumen
- CVE-2020-15930 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a joplin (joplin project), joplin.
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.4%, mayor que el 91.3% de las vulnerabilidades.
- Solución: actualizar a 1.1.7 o posterior.
| Package | Affected versions | Patched versions |
|---|
| joplin | ≥ 1.0.190, ≤ 1.0.245
| No fix yet |
| joplin npm | ≥ 1.0.190, < 1.1.7
| 1.1.7
|
Description
An XSS issue in Joplin desktop allows arbitrary code execution via a malicious HTML embed tag.
NVD description
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free