Critical · published December 9, 2021
🚨 A crafty `*.etherpad` file can turn your Etherpad instance into a playground for attackers, granting them admin privileges with terrifying ease! 🔥 Think of Etherpad like a bustling restaurant kitchen, where anyone can pop in and start cooking. An attacker can serve a special dish—that `*.etherpad` file—that, once accepted, lets them run the kitchen as they please, even sneaking in harmful ingredients! This vulnerability opens the door for attackers to not just gain admin rights but also to install malicious plugins that can execute arbitrary code and system commands. Imagine a rogue chef having full control of the restaurant, able to tamper with every meal and potentially serve up disastrous results. It's critical to act swiftly to protect your Etherpad!
Think of Etherpad like a bustling restaurant kitchen, where anyone can pop in and start cooking. An attacker can serve a special dish—that `*.etherpad` file—that, once accepted, lets them run the kitchen as they please, even sneaking in harmful ingredients! CVE-2021-43802 allows an attacker to craft a malicious `*.etherpad` file that, when imported, exploits a flaw in session management to gain admin privileges. This vulnerability stems from the core Etherpad failing to delete old `express-session` state, which could be leveraged by malicious plugins.
This vulnerability opens the door for attackers to not just gain admin rights but also to install malicious plugins that can execute arbitrary code and system commands. Imagine a rogue chef having full control of the restaurant, able to tamper with every meal and potentially serve up disastrous results. It's critical to act swiftly to protect your Etherpad! Upgrade your Etherpad to version 1.8.16 immediately to close this loophole. If upgrades aren't possible, consider configuring your reverse proxy to block imports to `/p/*/import`, limiting users to read-only access, and preventing the reuse of deleted `express_sid` cookie values. Check the GitHub Security Advisory for more detailed mitigation strategies. You've got this! With these steps, you'll keep your Etherpad safe and sound! 🛡️