Etherpad vulnerabilities

Products

• Etherpad 16
• Lite 2

Newest

• etherpad, ether etherpad-lite +1 more Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports CVE-2021-43802 9.9 CriticalDecember 9, 2021
• etherpad An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users... CVE-2021-34816 7.2 HighJuly 21, 2021
• etherpad A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote... CVE-2021-34817 6.1 MediumJuly 19, 2021
• etherpad In Etherpad < 1.8.3, a specially crafted URI would raise an unhandled exception in the cache... CVE-2020-22781 7.5 HighApril 28, 2021
• etherpad Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary... CVE-2020-22782 7.5 HighApril 28, 2021
• etherpad Etherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This... CVE-2020-22783 6.5 MediumApril 28, 2021
• etherpad ueberdb In Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns... CVE-2020-22784 7.5 HighApril 28, 2021
• etherpad Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service.... CVE-2020-22785 7.5 HighApril 28, 2021
• etherpad Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows... CVE-2015-3309 7.5 HighFebruary 13, 2020
• etherpad templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of... CVE-2019-18209 6.1 MediumOctober 19, 2019
• etherpad lite Etherpad Lite before 1.6.4 is exploitable for admin access. CVE-2018-9845 EPSS 12.7% 9.8 CriticalApril 29, 2018
• etherpad Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server.... CVE-2018-9327 8.1 HighApril 7, 2018
• etherpad Etherpad 1.6.3 before 1.6.4 allows an attacker to execute arbitrary code. CVE-2018-9326 9.8 CriticalApril 7, 2018
• etherpad Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an... CVE-2018-9325 7.5 HighApril 7, 2018
• etherpad Etherpad Lite Access Restriction Bypass CVE-2018-6835 Fix available 9.8 CriticalFebruary 8, 2018
• etherpad lite static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href. CVE-2018-6834 6.1 MediumFebruary 8, 2018
• etherpad node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to... CVE-2015-2298 7.5 HighJanuary 12, 2018
• etherpad Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests... CVE-2015-4085 7.5 HighSeptember 7, 2017
• etherpad Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows... CVE-2015-3297 7.5 HighJuly 7, 2017