high8.1
CVE-2018-9327
Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server.
Impact
Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server. The instance has to be configured to use a document database (DirtyDB, CouchDB, MongoDB, or RethinkDB).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Etherpad | Etherpad | from 1.5.0 through 1.5.7 from 1.6.0 before 1.6.4 |