CVE-2021-34816 | BDVDB-2026-157487 Detail

Description#

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ether/etherpad-lite/releases
https://blog.sonarsource.com/etherpad-code-execution-vulnerabilities

Exploit#

No public exploit known

History#

Version 12021-07-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.