What is GHSA-gjwp-7v3g-99pj?

GHSA-gjwp-7v3g-99pj is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Request Forgery (CSRF) in joplin

Which CVE IDs does GHSA-gjwp-7v3g-99pj cover?

GHSA-gjwp-7v3g-99pj covers the following CVE IDs: CVE-2021-23431. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gjwp-7v3g-99pj?

GHSA-gjwp-7v3g-99pj has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-gjwp-7v3g-99pj?

GHSA-gjwp-7v3g-99pj affects 1 product, including: npm/joplin:\u003c 2.3.2.

GHSA-gjwp-7v3g-99pjMediumCVSS 5.4

Cross-site Request Forgery (CSRF) in joplin

Vendor

GitHub Security Advisories

Published

September 2, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-23431 →

📋 Description

The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.

🎯 Affected products1

npm/joplin:< 2.3.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-23431
https://github.com/laurent22/joplin/commit/19b45de2981c09f6f387498ef96d32b4811eba5e
https://snyk.io/vuln/SNYK-JS-JOPLIN-1325537
https://github.com/advisories/GHSA-gjwp-7v3g-99pj