Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-3297
5
MEDIUMCVSS v2
Published
July 7, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests.
ether/etherpad
GitHubEtherpad: A modern really-real-time collaborative document editor.
GitHubEtherpad: A modern really-real-time collaborative document editor.= 1.5.0, = 1.2.9, = 1.2.5, = 1.2.11, = 1.1.1, = 1.4.1, = 1.2.91, = 1.2.1, = 1.2.4, = 1.1.2, = 1.2.3, = 1.2.10, = 1.5.1, = 1.2.6, = 1.2.7, = 1.2.8, = 1.1.3, = 1.1.4, = 1.1.5, = 1.2.0, = 1.2.12, = 1.3.0, = 1.4.0, = 1.2.2, = 1.2.81, = 1.5.2NVD