BDU%3A2022-02391 | Vulnetix

BDU%3A2022-02391 PUBLISHED CVSS 4.900000095367432 MEDIUM

Уязвимость модуля Advanced Content Filter WYSIWYG-редактора CKEditor , позволяющая нарушителю обойти существующую политику ограничения доступа для HTML-элементов

Risk Scores

CVSS 2.0

4.900000095367432

Affected Products

Vendor	Product	Versions
Сообщество свободного программного обеспечения, Oracle Corp., The CKEditor Team	Debian GNU/Linux, Oracle Banking Digital Experience, Drupal, Oracle Banking APIs, CKEditor

Timeline

Apr 19, 2022 CVE Published

References

https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj url
https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417 url
https://www.oracle.com/security-alerts/cpujan2022.html url
https://www.drupal.org/sa-core-2021-011 advisory

Open in Interactive Console →