Etherpad Lite
by Etherpad
Source repositories
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-9845 | Cri | 0.01 | 9.8 | 0.13 | Apr 29, 2018 | Etherpad Lite before 1.6.4 is exploitable for admin access. | ||
| CVE-2026-55086 | 0.00 | — | — | Aug 13, 2026 | ## Description `src/node/handler/ImportHandler.ts` and `src/node/handler/ExportHandler.ts` both compute their temporary working-file paths as: ```ts const randNum = Math.floor(Math.random() * 0xFFFFFFFF); const srcFile = `${os.tmpdir()}/etherpad_export_${randNum}.html`; const… | |||
| CVE-2026-55087 | 0.00 | — | — | Aug 13, 2026 | # GHSA-03 — `x-proxy-path` header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect) **Severity:** Medium **CVSS v3.1 vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N` **CVSS suggested base score:** ~6.1 — Medium … | |||
| CVE-2018-6834 | Med | 0.00 | 6.1 | 0.01 | Feb 8, 2018 | static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href. |
- risk 0.01cvss 9.8epss 0.13
Etherpad Lite before 1.6.4 is exploitable for admin access.
- CVE-2026-55086Aug 13, 2026risk 0.00cvss —epss —
## Description `src/node/handler/ImportHandler.ts` and `src/node/handler/ExportHandler.ts` both compute their temporary working-file paths as: ```ts const randNum = Math.floor(Math.random() * 0xFFFFFFFF); const srcFile = `${os.tmpdir()}/etherpad_export_${randNum}.html`; const…
- CVE-2026-55087Aug 13, 2026risk 0.00cvss —epss —
# GHSA-03 — `x-proxy-path` header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect) **Severity:** Medium **CVSS v3.1 vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N` **CVSS suggested base score:** ~6.1 — Medium …
- risk 0.00cvss 6.1epss 0.01
static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.