CVE-2021-34817

A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importin...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory blog.sonarsource.com
patch etherpad.org
patch github.com
patch github.com