En resumen
- CVE-2023-37299 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a joplin (joplin project), joplin.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.57%, mayor que el 47.4% de las vulnerabilidades.
- Solución: actualizar a 2.11.5 o posterior.
| Package | Affected versions | Patched versions |
|---|
| joplin | < 2.11.5
| 2.11.5
|
| joplin npm | < 2.11.5
| 2.11.5
|
Description
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
NVD description
Joplin before 2.11.5 allows XSS via an AREA element of an image map.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free