- Description
- Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin's HTML sanitizer allows the `name` attribute to be specified. If `name` is set to the same value as an existing `document` property (e.g. `querySelector`), that property is replaced with the element. This vulnerability's only known impact is denial of service. The note viewer fails to refresh until closed and re-opened with a different note. This issue has been addressed in version 3.2.8 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
- Source
- security-advisories@github.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 3.3
- Impact score
- 1.4
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- Severity
- LOW
- security-advisories@github.com
- CWE-20
- Hype score
- Not currently trending
🚨 #Breakingnews: "CVE-2024-55630" A new CVE detected - with severity "LOW". More: https://t.co/fbxjhJyE6R. 📢 Follow us for more updates! #CVE #ThreatAlert #InfoSec #CriticalVulnerability
@bluepinksec
10 Feb 2025
15 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-55630 🟢 LOW (3.3) 🏢 laurent22 - joplin 🏗️ < 3.2.8 🔗 https://t.co/AtmnxoUBBX 🔗 https://t.co/nFQtWM5xL1 🔗 https://t.co/pPSxe7mnxa #CyberCron #VulnAlert https://t.co/25cWJFLV10
@cybercronai
8 Feb 2025
111 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
1 Quote
CVE-2024-55630 HTML Sanitizer Vulnerability in Joplin Note-Taking Application Allows Property Replacement https://t.co/ElkhvAiwZl
@VulmonFeeds
8 Feb 2025
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-55630 Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Joplin's HTML sanitizer allows the… https://t.co/YPqFB9zZBE
@CVEnew
7 Feb 2025
745 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes