Lucene search
Veracode Vulnerability DatabaseVERACODE:33021HistoryNov 18, 2021 - 6:48 a.m.
Cross-site Scripting (XSS)
2021-11-1806:48:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.003 Low
EPSS
Percentile
69.6%
ckeditor/ckeditor is vulnerable to cross-site scripting. An attacker can inject malicious comments HTML bypassing content sanitization, which could result in executing JavaScript code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ckeditor/ckeditor | le | 4.16.2 | |
| ckeditor:sid | eq | 4.12.1+dfsg-1 | |
| ckeditor/ckeditor | le | 4.16.2 | |
| ckeditor:sid | eq | 4.12.1+dfsg-1 |
References
github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417
github.com/ckeditor/ckeditor4/commit/3687a9091f730f11d1720807b205a079ae7b99ce
github.com/ckeditor/ckeditor4/security/advisories/GHSA-7h26-63m7-qhf2
www.drupal.org/sa-core-2021-011
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujan2022.html
www.oracle.com/security-alerts/cpujul2022.html
Related
cvelist
cvelist
github
github
HTML comments vulnerability allowing to execute JavaScript code
2021-11-17 21:58:25
prion
prion
Design/Logic Flaw
2021-11-17 20:15:00
osv
osv
BIT-drupal-2021-41165
2024-03-06 10:55:05
CVE-2021-41165
2021-11-17 20:15:10
HTML comments vulnerability allowing to execute JavaScript code
2021-11-17 21:58:25
nvd
nvd
CVE-2021-41165
2021-11-17 20:15:10
ubuntucve
ubuntucve
CVE-2021-41165
2021-11-17 00:00:00
debiancve
debiancve
CVE-2021-41165
2021-11-17 20:15:10
cnvd
cnvd
CKEditor Cross-Site Scripting Vulnerability (CNVD-2021-92475)
2021-11-22 00:00:00
cve
cve
CVE-2021-41165
2021-11-17 20:15:10
nessus
nessus
Drupal 9.1.x < 9.1.14 Cross-Site Scripting
2021-11-25 00:00:00
Drupal 8.9.x < 8.9.20 / 9.1.x < 9.1.14 / 9.2.x < 9.2.9 Multiple Vulnerabilities (drupal-2021-11-17)
2021-11-18 00:00:00
Drupal 8.9.x < 8.9.20 Cross-Site Scripting
2021-11-25 00:00:00
openvas
openvas
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2021-011
2021-11-17 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00