CVE-2018-9325

Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-04-07

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Etherpad (Etherpad)

References

• http://blog.etherpad.org/2018/04/07/important-release-1-6-4/