| Package | Affected versions | Patched versions |
|---|---|---|
| etherpad | = 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.2.0= 1.2.1= 1.2.10= 1.2.11= 1.2.12= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.81= 1.2.9= 1.2.91= 1.3.0= 1.4.0= 1.4.1= 1.5.0= 1.5.1= 1.5.2 |
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free