CVE-2015-3309

概要

参考情報

• cve.killedkenny.io/cve/CVE-2015-3309 · Third Party Advisory
• openwall.com/lists/oss-security/2015/04/16/8 · Mailing List
• ether/etherpad-lite commit 0fa7650 · Third Party Advisory

etherpad のその他の脆弱性

• CVE-2021-43802高 8.8Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, m…
• CVE-2021-34816高 7.2An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by i…
• CVE-2021-34817中 6.1A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML b…
• CVE-2020-22785高 7.5Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoin…
• CVE-2020-22783中 6.5Etherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by…