CVE-2024-51210: Firepad

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Firepad through 1.5.11 allows remote attackers, who have knowledge of a pad ID, to retrieve both the current text of a document and all content that has previously been pasted into the document. NOTE: in several similar products, this is the intentional behavior for anyone who knows the full document ID and corresponding URL. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• Firepad Firepad: up to and including 1.5.11

Published 2024-12-04. Last modified 2026-06-17.