CVEs-PoC/2015/CVE-2015-2298.md

CVE-2015-2298

Description

node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an improper substring check when exporting a padID.

POC

Reference

• https://github.com/ether/etherpad-lite/releases/tag/1.5.2
• https://github.com/ether/etherpad-lite/releases/tag/1.5.2

Github

No PoCs found on GitHub currently.