📦 Etherpad

CVE-2021-43802 is a critical vulnerability in Etherpad that allows attackers to gain admin privileges by importing a malicious *.etherpad file. This can lead to arbitrary code execution through malici...

CVE-2021-34816 is an argument injection vulnerability in Etherpad's plugin management system that allows privileged users to execute arbitrary code on the server by installing plugins from attacker-co...

Etherpad versions before 1.8.3 contain a denial of service vulnerability in the import functionality. Attackers can crash Etherpad instances by uploading binary files to the import endpoint. This affe...