VDB
BDU%3A2022-02396
BDU%3A2022-02396
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость плагина Autolink WYSIWYG-редактора CKEditor , связанная с включением функций из недостоверной контролируемой области, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., The CKEditor Team | Debian GNU/Linux, WebCenter Sites, Financial Services Analytical Applications Infrastructure, Oracle Agile PLM, Oracle Commerce Merchandising, Database Server, Oracle Financial Services Model Management and Governance, JD Edwards EnterpriseOne Tools, Siebel UI Framework, CKEditor |
Timeline
- Apr 19, 2022 CVE Published
- Dec 10, 2024 CVE Updated
References
- https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416 url
- https://www.oracle.com//security-alerts/cpujul2021.html url
- https://www.oracle.com/security-alerts/cpujan2022.html url
- https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first advisory
- https://security-tracker.debian.org/tracker/CVE-2021-26272 advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html advisory
- https://www.oracle.com/security-alerts/cpujul2021.html advisory