Lucene search
+L

27 matches found

ATTACKERKB
ATTACKERKB
added 2021/08/13 12:15 a.m.5 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS5.4AI score0.01324EPSS
SaveExploits0References12Affected Software1
OSV
OSV
added 2021/08/13 12:15 a.m.4 views

UBUNTU-CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.5AI score0.01324EPSS
SaveExploits0References6
Prion
Prion
added 2021/08/13 12:15 a.m.37 views

Design/Logic Flaw

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

3.5CVSS5.6AI score0.01324EPSS
SaveExploits0References8Affected Software12
UbuntuCve
UbuntuCve
added 2021/08/13 12:15 a.m.45 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.5AI score0.01324EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/08/12 11:10 p.m.28 views

CVE-2021-37695

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.1AI score0.01324EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/08/12 11:10 p.m.33 views

CVE-2021-37695 Execution of JavaScript code using malformed HTML in ckeditor

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

7.3CVSS6.7AI score0.01324EPSS
SaveExploits0References8
CVE
CVE
added 2021/08/12 11:10 p.m.342 views

CVE-2021-37695

CKEditor 4 vulnerability CVE-2021-37695 involves the Fake Objects addon. The issue allows injection of malformed Fake Objects HTML that can lead to JavaScript execution in affected CKEditor 4 plugins when used at versions prior to 4.16.2. Public references in connected documents confirm the affec...

7.3CVSS6AI score0.01324EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder