CVE-2019-15302

The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Rich Text pad with editing rights for the URL) to corrupt it (i.e., cause data loss) via a trivial URL modification.

The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Rich Text pad with editing rights for the URL) to corrupt it (i.e., cause data loss) via a trivial URL modification.

La lógica de administración pad en XWiki labs CryptPad versiones anteriores a 3.0.0, permite a un atacante remoto (que tiene acceso a un pad de Texto Enriquecido con derechos de edición para la URL) corromperla (es decir, causar la pérdida de datos) por medio de una modificación trivial de la URL.