Upgrade tinyMCE to >= 7.0.0 to mitigate CVE-2024-29881/29203

🗓️ 08 Oct 2024 21:27:11Reported by 9473a4f264f2Type

Upgrade tinyMCE to >= 7.0.0 to mitigate CVE-2024-29881/29203, Jira version using 5.10.

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses tinymce-5.10.9.tgz which is vulnerable to CVE-2024-29203, CVE-2024-29881, and CVE-2024-29203.	15 Jul 202407:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Asset Management - There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application (CVE-2024-29203)	12 Jun 202415:55	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo Asset Management - There is a vulnerability in tinymce-6.7.3.min.js used by IBM Maximo Asset Management application (CVE-2024-29881)	12 Jun 202415:54	–	ibm
CNNVD	Tiny Technologies TinyMCE 安全漏洞	26 Mar 202400:00	–	cnnvd
CNNVD	Tiny Technologies TinyMCE 安全漏洞	26 Mar 202400:00	–	cnnvd
CVE	CVE-2024-29203	26 Mar 202413:23	–	cve
CVE	CVE-2024-29881	26 Mar 202413:31	–	cve
Cvelist	CVE-2024-29203 TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes	26 Mar 202413:23	–	cvelist
Cvelist	CVE-2024-29881 TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements	26 Mar 202413:31	–	cvelist
Debian CVE	CVE-2024-29203	26 Mar 202413:23	–	debiancve