CVE-2021-34816

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing...

Original description

The description as published by the source.

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
report blog.sonarsource.com