CVE-2023-22457

CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he "CKEditor.HTMLConverter" document lacked a protection against Cross-Site Request Forgery CSRF, allowing to execute macros with the rights of the current user. If a privileged user with...

CVE-2023-22457: Cross-Site Request Forgery (CSRF)

CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he CKEditor.HTMLConverter document lacked a protection against Cross-Site Request Forgery CSRF, allowing to execute macros with the rights of the current user. If a privileged user with...

CKEditor 跨站请求伪造漏洞

CKEditor is an open source, web-based text editor. A cross-site request forgery vulnerability exists in versions of CKEditor Integration UI prior to 1.64.3, which stems from a lack of protection against cross-site request forgery in the documentation of its CKEditor.HTMLConverter allows an attack...