Lucene search
China National Vulnerability DatabaseCNVD-2021-58262HistoryJul 20, 2021 - 12:00 a.m.
Etherpad Cross-Site Scripting Vulnerability
2021-07-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
etherpad
cross-site scripting
vulnerability
chat component
version 1.8.13
attack
javascript
html
document collaboration
real time
EPSS
0.002
Percentile
56.3%
Etherpad is a web-based online document collaboration tool. Multiple users can write a text document simultaneously through Etherpad and see all participants’ edits in real time.A cross-site scripting vulnerability exists in the chat component of Etherpad version 1.8.13, which can be exploited by an attacker to inject arbitrary JavaScript or HTML by importing a specially crafted pad.
Related
nvd
nvd
CVE-2021-34817
2021-07-19 14:15:08
cve
cve
CVE-2021-34817
2021-07-19 14:15:08
prion
prion
Cross site scripting
2021-07-19 14:15:00
osv
osv
CVE-2021-34817
2021-07-19 14:15:08
cvelist
cvelist
CVE-2021-34817
2021-07-19 13:38:11
thn
thn
Critical Flaws Reported in Etherpad — a Popular Google Docs Alternative
2021-07-13 15:42:00
sonarsource
sonarsource
Etherpad 1.8.13 - Code Execution Vulnerabilities
2021-07-13 00:00:00