Launchpad.net

CVE 2013-7380

The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability

See the CVE page on Mitre.org for more details.