CVE-2024-38356

🗓️ 19 Jun 2024 20:03:47Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 9 Views

TinyMCE open source rich text editor cross-site scripting vulnerabilit

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses tinymce-6.8.3.tgz which is vulnerable to CVE-2024-38357, CVE-2024-38356	19 Sep 202415:46	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of TinyMCE 6.8.2 IBM My webMethods Server is vulnerable to cross-site scripting.	25 Apr 202511:29	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in tinymce-6.8.1.min.js used by IBM Maximo Asset Management application (CVE-2024-38357, CVE-2024-38356)	6 Sep 202408:31	–	ibm
BDU FSTEC	The vulnerability of the TinyMCE formatted text editor arises from the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks.	23 Jul 202400:00	–	bdu_fstec
CNNVD	Tiny Technologies TinyMCE Security Vulnerability	19 Jun 202400:00	–	cnnvd
CVE	CVE-2024-38356	19 Jun 202420:03	–	cve
Cvelist	CVE-2024-38356 TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option	19 Jun 202420:03	–	cvelist
EUVD	EUVD-2024-2005	3 Oct 202520:07	–	euvd
Github Security Blog	TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option	19 Jun 202415:07	–	github
NCSC	Vulnerabilities fixed in Zimbra	10 Oct 202412:50	–	ncsc

19 Jun 2024 20:03Current

7High risk

Vulners AI Score7

CVSS 3.16.1

EPSS0.00529

SSVC

tinymce open source rich text editor cross-site scripting vulnerability