Lucene search
Redhat.comRH:CVE-2021-37695HistoryMay 20, 2022 - 11:58 p.m.
CVE-2021-37695
2022-05-2023:58:59
redhat.com
access.redhat.com
13
ckeditor
fake objects
vulnerability
patched
javascript code
html injection
version 4.16.2
EPSS
0.002
Percentile
61.0%
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.
Related
cvelist
cvelist
CVE-2021-37695 Execution of JavaScript code using malformed HTML in ckeditor
2021-08-12 23:10:10
ubuntucve
ubuntucve
CVE-2021-37695
2021-08-13 00:00:00
prion
prion
Design/Logic Flaw
2021-08-13 00:15:00
veracode
veracode
Command Injection
2021-08-19 08:55:23
cve
cve
CVE-2021-37695
2021-08-13 00:15:07
debiancve
debiancve
CVE-2021-37695
2021-08-13 00:15:07
openvas
openvas
CKEditor < 4.16.2 XSS Vulnerability - Linux
2022-08-10 00:00:00
CKEditor < 4.16.2 XSS Vulnerability - Windows
2022-08-10 00:00:00
Debian: Security Advisory (DLA-2813-1)
2021-11-10 00:00:00
github
github
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
2021-08-23 19:42:15
CKEditor 4 vulnerabilities in versions <4.16.1
2021-08-23 19:42:05
osv
osv
CVE-2021-37695
2021-08-13 00:15:00
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
2021-08-23 19:42:15
ckeditor - security update
2021-11-09 00:00:00
nvd
nvd
CVE-2021-37695
2021-08-13 00:15:07
debian
debian
[SECURITY] [DLA 2813-1] ckeditor security update
2021-11-09 08:52:03
nessus
nessus
Debian DLA-2813-1 : ckeditor - LTS security update
2021-11-10 00:00:00
Drupal 8.9.x < 8.9.18 / 9.1.x < 9.1.12 / 9.2.x < 9.2.4 Multiple Vulnerabilities (SA-CORE-2021-005)
2021-08-12 00:00:00
Drupal 9.2.x < 9.2.4 Third-Party Library Vulnerability
2021-09-06 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 35 Update: ckeditor-4.16.2-1.fc35
2021-09-24 20:59:27
[SECURITY] Fedora 33 Update: ckeditor-4.16.2-1.fc33
2021-09-29 01:10:13
[SECURITY] Fedora 34 Update: ckeditor-4.16.2-1.fc34
2021-09-29 01:10:12
ubuntu
ubuntu
CKEditor vulnerabilities
2022-03-23 00:00:00
CKEditor vulnerabilities
2022-03-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00