CVE-2022-28101

Source
https://cve.org/CVERecord?id=CVE-2022-28101
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28101.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-28101
Published
2022-04-28T13:55:08Z
Modified
2026-07-08T05:58:53.210308617Z
Summary
[none]
Details

Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28101.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/turtl/android

Affected ranges

Type
GIT
Repo
https://github.com/turtl/android
Events
Database specific
{
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:lyonbros:turtl:0.7.2.6:*:*:*:-:android:*:*",
        "cpe:2.3:a:lyonbros:turtl:0.7.2.6:*:*:*:-:ios:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0.7.2.6"
        },
        {
            "last_affected": "0.7.2.6"
        }
    ]
}

Affected versions

0.*
0.7.2.6
v0.*
v0.7.2.6-link-notes
v0.7.2.6-pre-sync-fix

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28101.json"

Git / github.com/turtl/desktop

Affected ranges

Type
GIT
Repo
https://github.com/turtl/desktop
Events
Database specific
{
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:lyonbros:turtl:0.7.2.6:*:*:*:-:android:*:*",
        "cpe:2.3:a:lyonbros:turtl:0.7.2.6:*:*:*:-:ios:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0.7.2.6"
        },
        {
            "last_affected": "0.7.2.6"
        }
    ]
}

Affected versions

0.*
0.7.2.6
v0.*
v0.7.2.6-error-reporting
v0.7.2.6-link-notes
v0.7.2.6-pre-sync-fix
v0.7.2.6-sqlite-fix
v0.7.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28101.json"