CVE-2018-6834: XSS
Published Feb 8, 2018
·Updated
static/js/padutils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
Affected Software
1 affected component
Etherpad Etherpad Lite<1.6.3
Remediation
Event History
Feb 8, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6834?
CVE-2018-6834 has a medium severity rating due to its potential for XSS attacks.
2
How do I fix CVE-2018-6834?
To fix CVE-2018-6834, upgrade to Etherpad Lite version 1.6.3 or later.
3
What type of vulnerability is CVE-2018-6834?
CVE-2018-6834 is a Cross-Site Scripting (XSS) vulnerability.
4
Which versions of Etherpad Lite are affected by CVE-2018-6834?
CVE-2018-6834 affects Etherpad Lite versions prior to 1.6.3.
5
Is CVE-2018-6834 exploitable remotely?
Yes, CVE-2018-6834 is exploitable remotely due to its nature as an XSS vulnerability.