CVE-2020-22785

Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service

published April 28, 2021

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01071 · 64.6th percentile
Published
2021-04-28T20:22Z
EPSS history
Timeline
  • 28 APR 20:22Z
    Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service
    cvelistv5