4 matches found
SUSE CVE-2018-6835
node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...
9.8CVSS8.2AI score0.02286EPSS
SaveExploits1References3
CVE-2018-6835
node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions...
9.8CVSS7.2AI score
SaveExploits0References2
CVE-2018-6835
Etherpad Lite before v1.6.3 contains a vulnerability in node/hooks/express/apicalls.js where JSONP is mishandled, allowing remote attackers to bypass intended access restrictions. The issue is tied to CVE-2018-6835. Affected software/version details from connected sources indicate the fix was rel...
9.8CVSS8.3AI score0.02286EPSS
SaveExploits1References2Affected Software1
20