CVE-2021-34816: High severity etherpad ueberdb vulnerability
An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34816?
CVE-2021-34816 has been classified as a high severity vulnerability due to the potential for privileged users to execute arbitrary code.
How do I fix CVE-2021-34816?
To fix CVE-2021-34816, upgrade Etherpad to version 1.8.14 or later where the vulnerability has been patched.
Who is affected by CVE-2021-34816?
CVE-2021-34816 affects Etherpad version 1.8.13, particularly installations allowing plugin management by privileged users.
What is the impact of CVE-2021-34816?
The impact of CVE-2021-34816 includes the possibility for attackers to execute arbitrary code on the server through malicious plugins.
How can privileged users mitigate CVE-2021-34816?
Privileged users can mitigate CVE-2021-34816 by restricting plugin installation to only trusted sources and updating to the latest version of Etherpad.