Etherpad UeberDB 安全漏洞

ueberDB is a software application. Turn every database into a simple key-value store. A security vulnerability exists in Etherpad UeberDB versions prior to 0.4.4 that allows bypassing the access control on key name enforcement...

PT-2021-4176

Name of the Vulnerable Software and Affected Versions Etherpad version 1.8.13 Description The issue is related to an Argument Injection problem in the plugin management of Etherpad, allowing privileged users to execute arbitrary code on the server. This can be achieved by installing plugins from ...

PT-2021-4175

Name of the Vulnerable Software and Affected Versions Etherpad version 1.8.13 Description A Cross-Site Scripting XSS issue in the chat component of Etherpad allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad. This occurs due to a lack of protection for the w...

Unauthenticated Remote Command Injection in ep_imageconvert

epimageconvert is a plugin for Etherpad Lite. epimageconvert = 0.0.2 is vulnerable to remote command injection. Authentication is not required for remote exploitation. Recommendation Update to version 0.0.3 or greater...

GHSA-28GR-86HG-R48W Unauthenticated Remote Command Injection in ep_imageconvert

epimageconvert is a plugin for Etherpad Lite. epimageconvert = 0.0.2 is vulnerable to remote command injection. Authentication is not required for remote exploitation. Recommendation Update to version 0.0.3 or greater...

Etherpad Path Traversal Vulnerability

Etherpad is the Etherpad Foundation's open source rich text online collaboration software. A path traversal vulnerability exists in the node/utils/Minify.js file in Etherpad versions 1.1.2 through 1.5.4. The vulnerability stems from a failure of a networked system or product to properly filter...

CVE-2015-3309

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files with permissions of the user running the service via a .. dot dot in the path parameter of HTTP API requests. NOTE: This vulnerability is due to an incomplete...

CVE-2015-3309

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files with permissions of the user running the service via a .. dot dot in the path parameter of HTTP API requests. NOTE: This vulnerability is due to an incomplete...

CVE-2015-3309

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files with permissions of the user running the service via a .. dot dot in the path parameter of HTTP API requests. NOTE: This vulnerability is due to an incomplete...

CVE-2015-3309

The CVE-2015-3309 entry concerns Etherpad’s Minify.js (node/utils/Minify.js) with a directory traversal vulnerability in Etherpad versions 1.1.2 through 1.5.4. The root cause is an incomplete fix to CVE-2015-3297, allowing an attacker to read arbitrary files via a .. sequence in the path paramete...

PT-2020-7835

Name of the Vulnerable Software and Affected Versions: Etherpad versions 1.1.2 through 1.5.4 Description: A directory traversal issue allows remote attackers to read arbitrary files with the permissions of the user running the service. This is achieved by including a .. dot dot in the path...

CVE-2015-3309: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files with permissions of the user running the service via a .. dot dot in the path parameter of HTTP API requests. NOTE: This vulnerability is due to an incomplete...

CVE-2013-7380

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...

Command injection

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...

CVE-2013-7380

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability Authentication is not required for remote exploitation...

UBUNTU-CVE-2013-7380

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability Authentication is not required for remote exploitation...

CVE-2013-7380

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...

CVE-2013-7380

The Etherpad Lite ep_imageconvert Plugin for Etherpad Lite is affected by a Remote Command Injection vulnerability. Affected: ep_imageconvert

PT-2020-7578

Name of the Vulnerable Software and Affected Versions Etherpad Lite ep imageconvert Plugin affected versions not specified Description The issue concerns a Remote Command Injection vulnerability in the Etherpad Lite ep imageconvert Plugin. Recommendations At the moment, there is no information...

CVE-2013-7380: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Etherpad Lite epimageconvert Plugin has a Remote Command Injection Vulnerability...