CVE-2020-22785

7.5 highEPSS 1.1%

High (7.5) in etherpad etherpad. EPSS 1.1% chance of exploitation in the next 30 days.

Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoints with empty data would flatten all pads due to lack of rate limiting and missing ownership check.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2021-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

etherpad:etherpad

References

https://github.com/ether/etherpad-lite/pull/3833
https://github.com/ether/etherpad-lite/pull/3833

Check your stack JSON