Lucene search

CVE-2021-26271

🗓️ 26 Jan 2021 21:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 525 Views

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin). NV

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 20
Veracode	Regular Expression Denial Of Service (ReDoS)	27 Jan 202105:04	–	veracode
NVD	CVE-2021-26271	26 Jan 202121:15	–	nvd
OSV	CVE-2021-26271	26 Jan 202121:15	–	osv
OSV	CKEditor 4 ReDoS Vulnerability	24 May 202217:40	–	osv
Cvelist	CVE-2021-26271	26 Jan 202120:39	–	cvelist
Prion	Design/Logic Flaw	26 Jan 202121:15	–	prion
UbuntuCve	CVE-2021-26271	26 Jan 202100:00	–	ubuntucve
Github Security Blog	CKEditor 4 ReDoS Vulnerability	24 May 202217:40	–	github
Debian CVE	CVE-2021-26271	26 Jan 202121:15	–	debiancve
OpenVAS	CKEditor 4.0 < 4.16 Multiple ReDoS Vulnerabilities - Linux	28 Jan 202100:00	–	openvas

Nvd

Node

ckeditor ckeditorRange4.0–4.16

Node

oracle agile_plmMatch9.3.5

oracle agile_plmMatch9.3.6

oracle application_expressRange<21.1.0

oracle financial_services_analytical_applications_infrastructureRange8.0.6–8.0.9

oracle financial_services_analytical_applications_infrastructureMatch8.1.0

oracle financial_services_analytical_applications_infrastructureMatch8.1.1

oracle jd_edwards_enterpriseone_toolsRange<9.2.6.0

oracle siebel_ui_frameworkRange<21.9

oracle webcenter_sitesMatch12.2.1.3.0

oracle webcenter_sitesMatch12.2.1.4.0

Source	Link
oracle	www.oracle.com//security-alerts/cpujul2021.html
ckeditor	www.ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/
oracle	www.oracle.com/security-alerts/cpuoct2021.html
github	www.github.com/ckeditor/ckeditor4/blob/major/CHANGES.md

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jan 2021 21:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS24.3

CVSS36.5

EPSS0.00639

CWE-829