Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-9861
HistoryApr 19, 2018 - 5:29 p.m.

CVE-2018-9861

2018-04-1917:29:00
CWE-79
[email protected]
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON

Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject arbitrary web script through a crafted IMG element.

Affected configurations

Nvd
Node
ckeditorenhanced_imageRange4.5.10–4.9.2ckeditor
Node
drupaldrupalRange8.0.0–8.4.7
OR
drupaldrupalRange8.5.0–8.5.2

Related

osv 4
nessus 7
prion 1
github 1
cvelist 1
openvas 12
friendsofphp 2
ubuntucve 1
cve 1
fedora 8
ubuntu 2
oracle 1
osv
osv
CVE-2018-9861
2018-04-19 17:29:00
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
2022-05-14 00:56:02
ckeditor vulnerabilities
2022-03-22 16:43:31
nessus
nessus
CKEditor 4.5.11 < 4.9.2 Enhanced Image Plugin XSS
2018-04-27 00:00:00
Fedora 28 : ckeditor (2019-31ad8a36d8)
2019-03-07 00:00:00
Fedora 27 : drupal8 (2018-1ba93b3144) (Drupalgeddon 2)
2018-05-11 00:00:00
prion
prion
Cross site scripting
2018-04-19 17:29:00
github
github
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
2022-05-14 00:56:02
cvelist
cvelist
CVE-2018-9861
2018-04-19 17:00:00
openvas
openvas
Drupal Cross Site Scripting Vulnerability (SA-CORE-2018-003) - Windows
2018-04-19 00:00:00
Drupal Cross Site Scripting Vulnerability (SA-CORE-2018-003) - Linux
2018-04-19 00:00:00
Fedora Update for ckeditor FEDORA-2019-31ad8a36d8
2019-03-07 00:00:00
friendsofphp
friendsofphp
Moderately critical - Cross Site Scripting
1970-01-01 00:00:00
Moderately critical - Cross Site Scripting
1970-01-01 00:00:00
ubuntucve
ubuntucve
CVE-2018-9861
2018-04-19 00:00:00
cve
cve
CVE-2018-9861
2018-04-19 17:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: ckeditor-4.11.2-1.fc29
2019-03-06 06:59:00
[SECURITY] Fedora 28 Update: ckeditor-4.11.2-1.fc28
2019-03-06 15:29:01
[SECURITY] Fedora 27 Update: drupal8-8.4.8-1.fc27
2018-05-10 19:13:53
ubuntu
ubuntu
CKEditor vulnerabilities
2022-03-23 00:00:00
CKEditor vulnerabilities
2022-03-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

59.1%

JSON
Related for NVD:CVE-2018-9861
osv4nessus7prion1github1cvelist1openvas12friendsofphp2ubuntucve1cve1fedora8ubuntu2oracle1