CVE-2021-43802

🗓️ 09 Dec 2021 22:35:12Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 36 Views

Etherpad < 1.8.16 allows admin privilege escalation via crafted import fil

Reporter	Title	Published	Views	Family All 8
CNNVD	Etherpad 安全漏洞	9 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-43802 Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports	9 Dec 202122:35	–	cvelist
EUVD	EUVD-2021-30694	3 Oct 202520:07	–	euvd
NVD	CVE-2021-43802	9 Dec 202123:15	–	nvd
Prion	Design/Logic Flaw	9 Dec 202123:15	–	prion
Positive Technologies	PT-2021-23944 · Unknown +1 · Express-Session +1	9 Dec 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-43802	22 May 202521:35	–	redhatcve
Veracode	Privilege Escalation	13 Dec 202104:03	–	veracode

NVD

Vulners

Node

etherpad etherpadRange<1.8.16

[
  {
    "product": "etherpad-lite",
    "vendor": "ether",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.8.16"
      }
    ]
  }
]

Source	Link
github	www.github.com/ether/etherpad-lite/issues/5010
github	www.github.com/ether/etherpad-lite/compare/b7065eb9a0ec7c3c265f8cfeb2534efe6f036456...77bcb507b30e762e9375b0511b3763e0162aae53
github	www.github.com/ether/etherpad-lite/security/advisories/GHSA-w3g3-qf3g-2mqc
github	www.github.com/ether/etherpad-lite/releases/tag/1.8.16