CVE-2015-4085

HIGH

Etherpad < 1.6.0 - Path Traversal in Frontend Tests

Title source: llm

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.

Core 2

Core References

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

Third Party Advisory x_refsource_confirm

CVSS v3 7.5

EPSS 0.0232

EPSS Percentile 81.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-22

Status published

Products (1)

etherpad/etherpad < 1.6.0

Published Sep 07, 2017

Tracked Since Feb 18, 2026