CVE-2018-9325: Infoleak
Published Apr 7, 2018
·Updated
Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names.
Affected Software
2 affected components
Etherpad Etherpad>=1.5.0<=1.5.7
Etherpad Etherpad>=1.6.0<1.6.4
Event History
Apr 7, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9325?
CVE-2018-9325 has a medium severity level due to the potential for unauthorized access to sensitive data.
2
How do I fix CVE-2018-9325?
To fix CVE-2018-9325, upgrade to Etherpad version 1.6.4 or later.
3
What versions of Etherpad are affected by CVE-2018-9325?
CVE-2018-9325 affects Etherpad versions 1.5.x and 1.6.x prior to 1.6.4.
4
What type of attack does CVE-2018-9325 enable?
CVE-2018-9325 allows an attacker to export all existing pads without knowing their names.
5
Who is at risk due to CVE-2018-9325?
Users running vulnerable versions of Etherpad are at risk of data exposure from this vulnerability.