← All advisories

Medium severity5.4NVD Advisory· Published Feb 17, 2020· Updated Jun 17, 2026

CVE-2020-9038

CVE-2020-9038

Description

Joplin through 1.0.184 allows Arbitrary File Read via XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
joplinnpm	< 1.2.1	1.2.1

Affected products

3

Joplin/Joplindescription
ghsa-coords
pkg:npm/joplin
Range: < 1.2.1
Joplin Project/Joplin
cpe:2.3:a:joplin_project:joplin:*:*:*:*:*:*:*:*
Range: <=1.0.184

Patches

Vulnerability mechanics

References

5

github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283baa2c065df0d0bcnvdPatchThird Party AdvisoryWEB
github.com/laurent22/joplin/compare/clipper-1.0.19...clipper-1.0.20nvdPatchRelease NotesThird Party AdvisoryWEB
packetstormsecurity.com/files/156582/Joplin-Desktop-1.0.184-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-6r7x-hc8m-985rghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-9038ghsaADVISORY

News mentions

0

No linked articles in our index yet.