Lucene search
Ubuntu.comUB:CVE-2022-24729HistoryMar 16, 2022 - 12:00 a.m.
CVE-2022-24729
2022-03-1600:00:00
ubuntu.com
ubuntu.com
26
0.003 Low
EPSS
Percentile
69.6%
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor.
CKEditor4 prior to version 4.18.0 contains a vulnerability in the dialog
plugin. The vulnerability allows abuse of a dialog input validator regular
expression, which can cause a significant performance drop resulting in a
browser tab freeze. A patch is available in version 4.18.0. There are
currently no known workarounds.
Notes
| Author | Note |
|---|---|
| sbeattie | embedded copies of ckeditor are in ldap-account-manager, rt4, and rt5 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | ckeditor | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | ckeditor | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | ckeditor | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | ckeditor | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | ckeditor | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | ckeditor | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | ckeditor3 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | ckeditor3 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | ckeditor3 | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | ckeditor3 | < any | UNKNOWN |
Related
cnvd
cnvd
CKEditor4 authentication vulnerability
2022-03-17 00:00:00
debiancve
debiancve
CVE-2022-24729
2022-03-16 17:15:07
cvelist
cvelist
CVE-2022-24729 Regular expression Denial of Service in dialog plugin
2022-03-16 00:00:00
prion
prion
Input validation
2022-03-16 17:15:00
cve
cve
CVE-2022-24729
2022-03-16 17:15:07
osv
osv
BIT-drupal-2022-24729
2024-03-06 10:54:08
CVE-2022-24729
2022-03-16 17:15:07
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-03-17 08:30:53
openvas
openvas
CKEditor 4.x < 4.18.0 Multiple Vulnerabilities - Windows
2022-03-21 00:00:00
CKEditor 4.x < 4.18.0 Multiple Vulnerabilities - Linux
2022-03-21 00:00:00
nessus
nessus
Drupal 9.2.x < 9.2.15 / 9.3.x < 9.3.8 Multiple Vulnerabilities (drupal-2022-03-16)
2022-03-16 00:00:00
Drupal 9.3.x < 9.3.8 Third-Party Library Vulnerability
2022-03-18 00:00:00
Drupal 9.2.x < 9.2.15 Third-Party Library Vulnerability
2022-03-18 00:00:00
ibm
ibm
drupal
drupal
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-005
2022-03-16 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: ckeditor-4.20.0-1.fc36
2022-10-23 09:04:30
[SECURITY] Fedora 37 Update: ckeditor-4.20.0-1.fc37
2022-11-10 22:46:03
hivepro
hivepro
Weekly Threat Digest: 14 – 20 March 2022
2022-03-23 04:17:40
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00