PT-2021-15519
CVE-2021-23431
·
تاريخ النشر
2021-08-24
·
تاريخ التحديث
2021-09-02
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
joplin versions prior to 2.3.2
Description
The issue is related to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms. This means that an attacker could potentially trick a user into performing unintended actions on a web application.
Recommendations
For versions prior to 2.3.2, update to version 2.3.2 or later to resolve the issue. As a temporary workaround, consider implementing additional CSRF protection measures, such as token-based validation, to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾