CVE-2026-105785

Katalog CVE

CVSS 4.8 · Medium EPSS 0,19%

Kerentanan Unverified Password Change. Skor CVSS 3.1 4.8 (Medium) menurut github.com.

Deskripsi (NVD)

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and packages/server/src/models/UserModel.ts allows UserModel.resetPassword to accept any token returned by TokenModel.userFromToken. An attacker who obtains a victim's CSRF or confirmation token through a separate disclosure channel can submit it to the public password-reset endpoint, replace the victim's password, and cause the existing sessions and API applications to be deleted. This issue is fixed in Joplin Server 3.7.2.

Rincian

Terbit di NVD

6 Oktober 2026

Terakhir diubah

8 Oktober 2026

Status NVD

Deferred

CVSS 3.1

4.8 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-620: Unverified Password Change
CWE-640: Weak Password Recovery Mechanism for Forgotten Password

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/laurent22/joplin/commit/7766eefa11fa006b6a1971da24e0c820cf1d2118
• https://github.com/laurent22/joplin/pull/16274
• https://github.com/laurent22/joplin/security/advisories/GHSA-8qm8-mp6h-qf35