{"action":"Upgrade ep_etherpad-lite to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"0"}],"component":"ep_etherpad-lite","cve_ids":["CVE-2018-6835"],"ecosystem":"npm","epss":0.02286,"exploited":false,"fixed_versions":["1.6.3"],"ghsa_id":"GHSA-mvmv-rq2j-97p2","id":"tcs_01M5KG1STCY7J7J30KWTRM429C","modified_at":"2023-11-08T04:00:21.878084Z","published_at":"2022-05-13T01:53:11Z","references":["https://osv.dev/vulnerability/GHSA-mvmv-rq2j-97p2","https://nvd.nist.gov/vuln/detail/CVE-2018-6835","https://github.com/ether/etherpad-lite/commit/626e58cc5af1db3691b41fca7b06c28ea43141b1","https://github.com/ether/etherpad-lite","https://github.com/ether/etherpad-lite/releases/tag/1.6.3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mvmv-rq2j-97p2","url":"https://osv.dev/vulnerability/GHSA-mvmv-rq2j-97p2"}],"summary":"Etherpad Lite Access Restriction Bypass"}