VDB
BDU%3A2020-04936
BDU%3A2020-04936
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Уязвимость WYSIWYG-редактора Ckeditor, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
Risk Scores
CVSS 2.0
6.400000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Fedora Project, The CKEditor Team | PeopleSoft Enterprise PeopleTools, WebCenter Portal, Fedora, Oracle Agile PLM, CKEditor, Siebel CRM, JD Edwards EnterpriseOne Tools |
Timeline
- Nov 2, 2020 CVE Published
- May 18, 2021 CVE Updated
References
- https://github.com/ckeditor/ckeditor4 url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4HHYQ6N452XTCIROFMJOTYEUWSB6FR4/ url
- https://nvd.nist.gov/vuln/detail/CVE-2020-9281 url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://www.oracle.com/security-alerts/cpuapr2021.html url