Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2018-9861
HistoryApr 19, 2018 - 5:29 p.m.

CVE-2018-9861

2018-04-1917:29:00
Google
osv.dev
3

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.2%

JSON

Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject arbitrary web script through a crafted IMG element.

Related

osv 3
openvas 12
nessus 7
prion 1
github 1
ubuntucve 1
cve 1
fedora 8
ubuntu 2
oracle 1
osv
osv
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
2022-05-14 00:56:02
ckeditor vulnerabilities
2022-03-22 16:43:31
ckeditor vulnerabilities
2022-03-23 08:57:25
openvas
openvas
Drupal Cross Site Scripting Vulnerability (SA-CORE-2018-003) - Windows
2018-04-19 00:00:00
Drupal Cross Site Scripting Vulnerability (SA-CORE-2018-003) - Linux
2018-04-19 00:00:00
Fedora Update for ckeditor FEDORA-2019-31ad8a36d8
2019-03-07 00:00:00
nessus
nessus
CKEditor 4.5.11 < 4.9.2 Enhanced Image Plugin XSS
2018-04-27 00:00:00
Fedora 28 : ckeditor (2019-31ad8a36d8)
2019-03-07 00:00:00
Fedora 28 : drupal8 (2018-8fd924a53d) (Drupalgeddon 2)
2019-01-03 00:00:00
prion
prion
Cross site scripting
2018-04-19 17:29:00
github
github
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
2022-05-14 00:56:02
ubuntucve
ubuntucve
CVE-2018-9861
2018-04-19 00:00:00
cve
cve
CVE-2018-9861
2018-04-19 17:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: ckeditor-4.11.2-1.fc29
2019-03-06 06:59:00
[SECURITY] Fedora 28 Update: ckeditor-4.11.2-1.fc28
2019-03-06 15:29:01
[SECURITY] Fedora 27 Update: drupal8-8.4.8-1.fc27
2018-05-10 19:13:53
ubuntu
ubuntu
CKEditor vulnerabilities
2022-03-23 00:00:00
CKEditor vulnerabilities
2022-03-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.2%

JSON
Related for OSV:CVE-2018-9861
osv3openvas12nessus7prion1github1ubuntucve1cve1fedora8ubuntu2oracle1