Message-Id: 202204121555
Time: 12.04.2022, 4 pm until 13.04.20222, 7:30 pm
Affected: users of pad.gwdg.de
Impact: service not available

Due to a security vulnerability, the GWDG Pad service was temporarily unavailable.

Media uploaded since version 1.9.1 were created with an easily guessable filename [1]. To prevent sensitive information from being leaked, existing files and all pads were updated. This process took about 12 hours due to the large number of pads.

We apologize for any inconvenience this may have caused.

[1] https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-q6vv-2q26-j7rx