| Package | Affected versions | Patched versions |
|---|---|---|
| etherpad | < 1.8.3 | 1.8.3 |
Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free