CVE-2021-23431

Cross-Site Request Forgery (CSRF) in npm/joplin

Identifier

CVE-2021-23431

Package Slug

npm/joplin

Vulnerability

Cross-Site Request Forgery (CSRF)

Description

The package jopl is vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.

Affected Versions

All versions before 2.3.2

Solution

Upgrade to version 2.3.2 or above.

Last Modified

2021-09-01

source