CVE-2019-18209

6.1

MEDIUMCVSS v3

Published

October 19, 2019

CVSS v2

4.3 MEDIUM

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.

GitHubEtherpad: A modern really-real-time collaborative document editor.

= 1.7.5NVD

Docker HubThis is the Etherpad image from the development team.

= 1.7.5NVD