Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-51210

Date: December 3, 2024

Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all content that has previously been pasted into the document. NOTE: in several similar products, this is the intentional behavior for anyone who knows the full document ID and corresponding URL. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Language: JS

Severity Score

Related Resources (7)

https://nvd.nist.gov/vuln/detail/CVE-2024-51210
https://github.com/FirebaseExtended/firepad
https://firebase.blog/posts/2013/04/announcing-firepad-our-open-source/
https://firebase.blog/posts/2013/04/announcing-firepad-our-open-source
https://github.com/FirebaseExtended/firepad/releases/tag/v1.5.11
https://medium.com/@adityaahuja.work/accessing-full-history-of-firepad-users-ddc889e73936
https://www.mend.io/vulnerability-database/CVE-2024-51210

Severity Score

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

Out-of-bounds Read

CWE-125

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us