Threats tagged 'ghsa-2jwf-f4xq-f24h'

Etherpad-lite versions prior to 3.1.0 use Math.random() to generate temporary filenames for import/export operations in a shared temporary directory. This allows a local unprivileged attacker to predict these filenames and create symbolic links that cause the Etherpad process to overwrite arbitrary files with attacker-controlled content. The vulnerability is fixed in version 3.1.0.