← Database

CVE-2021-34816

HIGH CVSS: 7.2 Published: 2021-07-21 Modified: 2026-06-17

Description

An Argument Injection issue in the plugin management of Etherpad 1.8.13 allows privileged users to execute arbitrary code on the server by installing plugins from an attacker-controlled source.

Affected Platforms

Etherpad Etherpad

Weakness Type

CWE-88

References