Lucene search
GoogleOSV:CVE-2024-37888HistoryJun 14, 2024 - 6:15 p.m.
CVE-2024-37888
2024-06-1418:15:27
Google
osv.dev
open link
ckeditor
vulnerability
javascript
execution
software
security
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7
Confidence
High
The Open Link is a CKEditor plugin, extending context menu with a possibility to open link in a new tab. The vulnerability allowed to execute JavaScript code by abusing link href attribute. It affects all users using the Open Link plugin at version < 1.0.5.
Related
nvd
nvd
CVE-2024-37888
2024-06-14 18:15:27
githubexploit
githubexploit
Exploit for Cross-site Scripting in Mlewand Open Link
2024-06-10 07:00:18
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-37888
2024-06-14 18:15:27
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7
Confidence
High
Related for OSV:CVE-2024-37888