VDB
BDU%3A2025-08114
BDU%3A2025-08114
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Уязвимость функции General HTML Support (GHS) и HTML embed панели инструментов Block Toolbar WYSIWYG-редактора CKEditor, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
Risk Scores
CVSS 4.0
5.099999904632568
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The CKEditor Team | CKEditor | |
| ckeditor | ckeditor5 | >= 40.0.0, < 43.1.1 |
Timeline
- Sep 25, 2024 CVE Published
- Sep 25, 2024 PoC Published
- Jul 7, 2025 CVE Updated
References
- https://github.com/advisories/GHSA-rgg8-g5x8-wr9v advisory
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rgg8-g5x8-wr9v advisory
- https://github.com/ckeditor/ckeditor5/releases/tag/v43.1.1 advisory
- https://advisories.gitlab.com/pkg/npm/@ckeditor/ckeditor5-clipboard/CVE-2024-45613/ advisory
- https://thesecmaster.com/blog/how-to-fix-cve-2024-45613-a-high-severity-cross-site-scripting-xss-vulnerability url
- https://vuldb.com/?id.278468 url