CVE-2025-51846

概要

参考情報

• JohnPerifanis/cryptpad-cve-2025-51846-advisory · Exploit
• cryptpad/cryptpad#2239 · Patch
• raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-119-01.json · Third Party Advisory
• cve.org/CVERecord · Third Party Advisory

cryptpad のその他の脆弱性

• CVE-2025-49591緊急 9.1CryptPad is a collaboration suite. Prior to version 2025.3.0, enforcement of Two-Factor Authentication (2FA) in CryptPad can be trivially by…
• CVE-2025-49590中 6.1CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent…
• CVE-2019-15302中 6.5The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Rich Text pad with editing rights…
• CVE-2017-1000051中 6.1Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web s…