CVE-2015-4085

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.

• CWE-22

• http://www.openwall.com/lists/oss-security/2015/05/26/3Mailing List, Third Party Advisory
• https://github.com/ether/etherpad-lite/commit/5409eb314c4e072b9760b8d30b985fa0bb96a006Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/05/26/3Mailing List, Third Party Advisory
• https://github.com/ether/etherpad-lite/commit/5409eb314c4e072b9760b8d30b985fa0bb96a006Third Party Advisory

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4075The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remo…8.1
• CVE-2015-4077The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.s…
• CVE-2015-4078Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3…
• CVE-2015-4080The Kankun Smart Socket device and mobile application uses a…
• CVE-2015-4082attic before 0.15 does not confirm unencrypted backups with …
• CVE-2015-4084Cross-site scripting (XSS) vulnerability in the Free Counter…
• CVE-2015-4089Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-4091XML external entity (XXE) vulnerability in SAP NetWeaver AS …
• CVE-2015-4092Buffer overflow in the XComms process in SAP Afaria 7.00.662…
• CVE-2015-4093Cross-site scripting (XSS) vulnerability in Elasticsearch Ki…
• CVE-2015-4094The Thycotic Password Manager Secret Server application thro…
• CVE-2015-4100Puppet Enterprise 3.7.x and 3.8.0 might allow remote authent…