Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-6835
7.5
HIGHCVSS v2
Published
February 8, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions.
GitHub