CVE-2020-22783

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

CVE-2020-22784

Affected software : Etherpad UeberDB (pre-0.4.4). Root cause : MySQL omits trailing spaces on CHAR/VARCHAR during comparisons, allowing bypass of key-name access controls via the MySQL connector. Impact : Bypassing access controls for key names in database records. Status : Exploitation details n...

CVE-2020-22784

In Etherpad UeberDB 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names...

CVE-2020-22785

Etherpad 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check...

CVE-2020-22785

CVE-2020-22785 affects Etherpad-Lite versions prior to 1.8.3 due to a missing lock check, enabling a denial-of-service condition. Aggressively targeting random pad import endpoints with empty data could flatten all pads because of no rate limiting and missing ownership checks. The vulnerability i...

CVE-2020-22785

Etherpad 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check...

PT-2021-10791

Name of the Vulnerable Software and Affected Versions Etherpad UeberDB versions prior to 0.4.4 Description The issue allows bypassing access controls enforced on key names when retrieving database records using UeberDB's MySQL connector. This is due to MySQL omitting trailing spaces on char /...

PT-2021-10788

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 1.8.3 Description A specially crafted URI can cause a denial of service by raising an unhandled exception in the cache mechanism, leading to a crash of the instance. Recommendations For versions prior to 1.8.3, updat...

PT-2021-10790

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 1.8.3 Description The issue concerns the insecure storage of passwords used by users in the database and log files. This affects every database backend supported by Etherpad. Recommendations For versions prior to...

PT-2021-10792

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 1.8.3 Description The issue is related to a missing lock check, which could cause a denial of service. An attack involving aggressively targeting random pad import endpoints with empty data could flatten all pads due...

PT-2021-10789

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 1.8.3 Description The issue is related to a denial of service in the import functionality. Specifically, uploading a binary file to the import endpoint can cause the instance to crash. Recommendations For versions...

CVE-2020-22783: Cleartext Storage of Sensitive Information

Etherpad 1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by Etherpad...

CVE-2020-22781: Improper Neutralization of Special Elements used in an SQL Command

In Etherpad 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denial of service crash the instance...

CVE-2020-22784: Incorrect Comparison

In Etherpad UeberDB 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns during comparisons, retrieving database records using UeberDB's MySQL connector could allow bypassing access controls enforced on key names...

CVE-2020-22782: Undefined Security Weakness

Etherpad 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash the instance...

CVE-2020-22785: Allocation of Resources Without Limits or Throttling

Etherpad 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check...

Etherpad 安全漏洞

Etherpad-Lite is a Web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in Etherpad-Lite versions prior to 1.8.3, which can be exploited by attackers to cause a denial of service...

Etherpad-Lite 安全漏洞

Etherpad-Lite is a Web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in Etherpad-Lite versions prior to 1.8.3 that stems from the effects of a missing lock check and can be exploited by an attacker to cause a denial of service...

Etherpad SQL注入漏洞

Etherpad-Lite is a web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in Etherpad versions prior to 1.8.3, which stems from a specially designed URI that raises an unhandled exception in the caching mechanism and results in a denial of service...

Etherpad 安全漏洞

Etherpad-Lite is a Web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in versions of Etherpad prior to 1.8.3 that stems from insecurely storing passwords used by users in the database and log files...