Vulnerabilities in laurent22
15 resultsCVE-2025-27134HIGHPrivilege escalation in Joplin server via user patch endpointEPSS 1.7%CVE-2024-49362HIGHRemote Code Execution on click of <a> Link in markdown previewEPSS 1.0%CVE-2023-45673HIGHArbitrary code execution on click of PDF links in JoplinEPSS 1.0%CVE-2024-53268HIGHLack of validation on openExternal allows 1 click remote code execution in joplinEPSS 0.7%CVE-2024-40643CRITICALJoplin has a parsing error leading to Cross-site Scripting (XSS)EPSS 0.7%CVE-2025-27409HIGHJoplin Server Vulnerable to Path TraversalEPSS 0.5%CVE-2023-39517HIGHCross site scripting (XSS) when clicking on an untrusted `<map>` link in JoplinEPSS 0.5%CVE-2025-24028HIGHCross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in JoplinEPSS 0.5%CVE-2025-25187HIGHCross-site Scripting in Goto Anything allows arbitrary code execution in JoplinEPSS 0.4%CVE-2023-37898HIGHSafe mode Cross-site Scripting (XSS) vulnerability in JoplinEPSS 0.4%CVE-2023-38506HIGHCross-site Scripting (XSS) when pasting HTML into the rich text editor in JoplinEPSS 0.4%CVE-2024-55630LOWDOM Clobbering leads to temporary DOS in the note viewer in JoplinEPSS 0.3%CVE-2026-34600MEDIUMJoplin Server delta API returns note content after share access is revokedEPSS 0.3%CVE-2026-22810HIGHJoplin: Path traversal in OneNote importer allows overwriting arbitrary filesEPSS 0.2%CVE-2025-57798MEDIUMJoplin has Denial of Service (DoS) via Uncontrolled Resource Allocation through Title InputEPSS 0.2%