Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names.
References
Link | Resource |
---|---|
http://blog.etherpad.org/2018/04/07/important-release-1-6-4/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2018-04-07 21:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-9325
Mitre link : CVE-2018-9325
CVE.ORG link : CVE-2018-9325
JSON object : View
Products Affected
etherpad
- etherpad
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor