CVE-2020-22783

2021-04-2821:15:08

Google

osv.dev

etherpad security vulnerability

password storage

database security

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

30.8%

JSON

Etherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad.

References

github.com/ether/etherpad-lite/commit/53f126082a8b3d094e48b159f0f0bc8a5db4b2f4

github.com/ether/etherpad-lite/issues/3421