Логотип exploitDog
bind:CVE-2021-37695
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-37695

Количество 4

Количество 4

ubuntu логотип

CVE-2021-37695

больше 4 лет назад

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.

CVSS3: 7.3
EPSS: Низкий
nvd логотип

CVE-2021-37695

больше 4 лет назад

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.

CVSS3: 7.3
EPSS: Низкий
debian логотип

CVE-2021-37695

больше 4 лет назад

ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...

CVSS3: 7.3
EPSS: Низкий
github логотип

GHSA-m94c-37g6-cjhc

больше 4 лет назад

Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.

CVSS3: 7.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.

CVSS3: 7.3
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.

CVSS3: 7.3
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content suppo ...

CVSS3: 7.3
0%
Низкий
больше 4 лет назад
github логотип
GHSA-m94c-37g6-cjhc

Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.

CVSS3: 7.3
0%
Низкий
больше 4 лет назад

Уязвимостей на страницу