Lucene search
Veracode Vulnerability DatabaseVERACODE:33288HistoryDec 13, 2021 - 4:03 a.m.
Privilege Escalation
2021-12-1304:03:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
privilege escalation
etherpad-lite
validation
import files
admin privileges
arbitrary code
malicious crafted file
security issue
EPSS
0.001
Percentile
47.9%
github.com/ether/etherpad-lite is vulnerable to Privilege Escalation. The library does not properly validate the *.etherpad import files, allowing an attacker to gain admin privileges and execute arbitrary code using malicious crafted import file.
References
github.com/ether/etherpad-lite/commit/9bc90128cb4d527e5bc7585df6e84aca1c991a20
github.com/ether/etherpad-lite/compare/b7065eb9a0ec7c3c265f8cfeb2534efe6f036456...77bcb507b30e762e9375b0511b3763e0162aae53
github.com/ether/etherpad-lite/issues/5010
github.com/ether/etherpad-lite/releases/tag/1.8.16
github.com/ether/etherpad-lite/security/advisories/GHSA-w3g3-qf3g-2mqc
Related
osv
osv
CVE-2021-43802
2021-12-09 23:15:07
cve
cve
CVE-2021-43802
2021-12-09 23:15:07
cvelist
cvelist
prion
prion
Design/Logic Flaw
2021-12-09 23:15:00
nvd
nvd
CVE-2021-43802
2021-12-09 23:15:07