CVE-2021-34816
An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.
参照URL
- advisory github.com
- report blog.sonarsource.com