The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.
| Software | From | Fixed in |
|---|---|---|
| joplinapp / joplin | - | 2.3.2 |
joplin
|
- | 2.3.2 |