CVE-2021-23431: Joplinapp Joplin

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The package joplin before 2.3.2 are vulnerable to Cross-site Request Forgery (CSRF) due to missing CSRF checks in various forms.

Affected products

• Joplinapp Joplin: before 2.3.2 (fixed in 2.3.2)

Published 2021-08-24. Last modified 2026-06-17.