VDB
BDU%3A2022-02008
BDU%3A2022-02008
PUBLISHED
CVSS 7.5 HIGH
Уязвимость модуля обработки HTML-страниц WYSIWYG-редактора CKEditor, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., The CKEditor Team | Debian GNU/Linux, Oracle Banking Digital Experience, Drupal, Oracle Banking APIs, CKEditor |
Timeline
- Apr 8, 2022 CVE Published
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-41165 url
- https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417 url
- https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7h26-63m7-qhf2 url
- https://www.drupal.org/sa-core-2021-011 url
- https://www.oracle.com/security-alerts/cpujan2022.html url
- https://security-tracker.debian.org/tracker/CVE-2021-41165 url