NetSight
critical9.0

CVE-2022-35131

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

Impact

Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.

Affected products

VendorProductAffected versions
JoplinappJoplin
Version 2.8.8

Weakness classification

References