Skip to content
OpenAdvisories

Package · npm

ep_etherpad-lite

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-6835

    Etherpad Lite Access Restriction Bypass

    node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions.

    ep_etherpad-lite npm