CVE-2021-34816

High

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by…

mitre·CWE-88·Published 2021-07-21

CVSS

7.2

EPSS

0.02

KEV

Exploits

cve.orgen

193 chars

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.

NVDen

193 chars

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.

Un problema de Inyección de Argumentos en la administración de plugins de Etherpad versión 1.8.13, permite a usuarios con privilegios ejecutar código arbitrario en el servidor al instalar plugins desde una fuente controlada por el atacante

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.1	Primary	NVD	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H