CVE-2021-34817

Description

References

• blog.sonarsource.com/etherpad-code-execution-vulnerabilities · Third Party Advisory
• etherpad.org · Patch
• ether/etherpad-lite commit a796811 · Exploit
• ether/etherpad-lite release 1.8.14 · Patch

Autres vulnérabilités de etherpad

• CVE-2021-43802ÉLEVÉE 8.8Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, m…
• CVE-2021-34816ÉLEVÉE 7.2An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by i…
• CVE-2020-22785ÉLEVÉE 7.5Etherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service. Aggressively targeting random pad import endpoin…
• CVE-2020-22783MOYENNE 6.5Etherpad <1.8.3 stored passwords used by users insecurely in the database and in log files. This affects every database backend supported by…
• CVE-2020-22782ÉLEVÉE 7.5Etherpad < 1.8.3 is affected by a denial of service in the import functionality. Upload of binary file to the import endpoint would crash th…