Security Advisory

CVE-2019-18209

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-10-19 00:50:06

Last updated 2024-08-05 01:47:13

Assigner mitre

State PUBLISHED

templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer.