VDB
BDU%3A2022-02395
BDU%3A2022-02395
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость плагина Advanced Tab for Dialogs WYSIWYG-редактора CKEditor, позволяющая нарушителю подделать содержимое адресной строки
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., The CKEditor Team | Debian GNU/Linux, WebCenter Sites, Financial Services Analytical Applications Infrastructure, Oracle Agile PLM, Database Server, Oracle Financial Services Model Management and Governance, JD Edwards EnterpriseOne Tools, Siebel UI Framework, CKEditor |
Timeline
- Apr 19, 2022 CVE Published
References
- https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416 url
- https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first url
- https://www.oracle.com//security-alerts/cpujul2021.html url
- https://www.oracle.com/security-alerts/cpuoct2021.html url
- https://security-tracker.debian.org/tracker/CVE-2021-26271 advisory
- https://www.oracle.com/security-alerts/cpujul2021.html advisory