CVE-2020-22785

CVE-2020-22785 affects Etherpad-Lite versions prior to 1.8.3 due to a missing lock check, enabling a denial-of-service condition. Aggressively targeting random pad import endpoints with empty data could flatten all pads because of no rate limiting and missing ownership checks. The vulnerability i...

Etherpad-Lite 安全漏洞

Etherpad-Lite is a Web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in Etherpad-Lite versions prior to 1.8.3 that stems from the effects of a missing lock check and can be exploited by an attacker to cause a denial of service...