Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: XWiki Component: Cryptpad Clear all filters
TI-2025-32422 CVE-2025-51846 · GHSA-jmrh-f3j8-q3c4

CryptPad unbounded WebSocket frame flood

Priority MEDIUM 44

CryptPad 2025.3.1 allows unbounded WebSocket frame flood.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00578 Published 2026-04-30 Fixed in 2026.2.2 CWE-770
TI-2025-31604 CVE-2025-49591

CryptPad 2FA Bypass Vulnerability

Priority HIGH 66

CryptPad is a collaboration suite.

CVSS 4.0HIGH 7.4 Network Low privileges No interaction EPSS 0.00518 Published 2025-06-18 Fixed in 2025.3.0 CWE-284
TI-2019-11412 CVE-2019-15302 · GHSA-gwjm-w339-m6p5

The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker…

Priority LOW 32

The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Rich Text pad with editing rights for the URL) to corrupt it (i.e., cause data loss) via a trivial URL modificati…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01358 Published 2019-09-11 No fix listed CWE-404