CVE-2021-23431

8.8 highEPSS 0.4%

High (8.8) in joplinapp joplin. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in joplin 2.3.2.

The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.

Severity

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-08-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-gjwp-7v3g-99pj	npm	joplin	<2.3.2	2.3.2