Threats tagged 'ghsa-vqfp-p66c-xrp9'

Etherpad's device-to-device author-token transfer endpoint has multiple security flaws: the transfer URL never expires, can be reused multiple times, and exposes the cleartext author token in the GET response body. This allows an attacker who obtains the transfer UUID to impersonate the author persistently by redeeming the token repeatedly and accessing the raw token. The vulnerability affects versions 2.6.0 through 3.0.0 and is fixed in version 3.1.0.