Etherpad Lite

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-9845 CRITICAL POC PATCH THREAT Act Now

Etherpad Lite before 1.6.4 is exploitable for admin access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Etherpad Lite

NVD GitHub

CVSS 3.0

9.8

EPSS

13.1%

CVE-2018-6834 MEDIUM PATCH This Month

static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Etherpad Lite

NVD GitHub

CVSS 3.0

6.1

EPSS

0.9%

CVE-2018-9845

EPSS 13% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

Etherpad Lite before 1.6.4 is exploitable for admin access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Etherpad Lite

NVD GitHub

CVE-2018-6834

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Etherpad Lite

NVD GitHub