CVE-2021-23431

🔶 medium

The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.

CVSS Score

5.4

Medium

EPSS Score

0.1

Exploit Probability

Published Date

2021-08-24

First Seen: 2026-01-05

This CVE is Lower Risk - more severe than 22.2% of all 360,548 vulnerabilities in our database.

#280,402

Below average severity

Severity Percentile

Last Modified 2024-11-21

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE IDs (Weakness Types)

CWE-352

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
joplinapp	joplin	Affected	< 2.3.2

Patch Third Party Advisory

Patch Third Party Advisory

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-22810	⚠️ high	8.2	0.2	Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Versions prior...	2026-05-18
CVE-2022-40277	⚠️ high	7.8	0.1	Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link ...	2022-09-30
CVE-2022-35131	⛔ critical	9.0	1.9	Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.	2022-07-25

These CVEs affect the same products