Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Joplin (joplinapp@mastodon.social)'s status on Tuesday, 25-Feb-2025 11:38:51 JST Joplin

🚨 Security update: Joplin Server 3.3.3 🚨
A vulnerability in Joplin Server has recently been patched. If you are self-hosting it, please upgrade to v3.3.3 as soon as possible.
🔗 Details: https://discourse.joplinapp.org/t/security-update-joplin-server-vulnerability-addressed-in-version-3-3-3/44013
In conversation about 3 months ago from mastodon.social permalink
Attachments
1. Domain not in remote thumbnail source whitelist: canada1.discourse-cdn.com
  
  Security update: Joplin Server vulnerability addressed in version 3.3.3
  
  We recently identified a vulnerability in Joplin Server that could potentially allow privilege escalation by exploiting an API endpoint. Fix in version 3.3.3 The vulnerability has been fixed in Joplin Server version 3.3.3 and we strongly recommend all users to upgrade to this version as soon as possible to ensure the security of their systems. Impact on Joplin Cloud While Joplin Cloud may have been affected, it uses a separate domain for the API, which means the known proof of concept does not...

Feeds