Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5340-1
HistoryMar 22, 2022 - 12:00 a.m.

CKEditor vulnerabilities

2022-03-2200:00:00
ubuntu.com
424

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

7.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.0%

JSON

Releases

  • Ubuntu 21.10
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • ckeditor - text editor which can be embedded into web pages

Details

Kyaw Min Thein discovered that CKEditor incorrectly handled
certain inputs. An attacker could possibly use this issue
to execute arbitrary code. This issue only affects
Ubuntu 18.04 LTS. (CVE-2018-9861)

Micha Bentkowski discovered that CKEditor incorrectly handled
certain inputs. An attacker could possibly use this issue to
execute arbitrary code. This issue only affects
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-9281)

Anton Subbotin discovered that CKEditor incorrectly handled
certain inputs. An attacker could possibly use this issue to
execute arbitrary code. This issue only affects
Ubuntu 21.10. (CVE-2021-32808)

Anton Subbotin discovered that CKEditor incorrectly handled
certain inputs. An attacker could possibly use this issue to
inject arbitrary code. (CVE-2021-32809)

Or Sahar discovered that CKEditor incorrectly handled certain
inputs. An attacker could possibly use this issue to execute
arbitrary code. This issue only affects
Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-33829)

Mika Kulmala discovered that CKEditor incorrectly handled
certain inputs. An attacker could possibly use this issue to
execute arbitrary code. (CVE-2021-37695)

OSVersionArchitecturePackageVersionFilename
Ubuntu21.10noarchckeditor< 4.16.0+dfsg-2ubuntu0.1UNKNOWN
Ubuntu20.04noarchckeditor< 4.12.1+dfsg-1ubuntu0.1UNKNOWN
Ubuntu18.04noarchckeditor< 4.5.7+dfsg-2ubuntu0.18.04.1UNKNOWN

Related

ubuntu 1
osv 18
openvas 33
nessus 17
fedora 14
github 7
ibm 11
debian 1
veracode 5
ubuntucve 6
prion 7
cve 7
debiancve 4
archlinux 1
redhatcve 2
drupal 1
fortinet 1
oracle 7
ubuntu
ubuntu
CKEditor vulnerabilities
2022-03-23 00:00:00
osv
osv
ckeditor vulnerabilities
2022-03-22 16:43:31
ckeditor vulnerabilities
2022-03-23 08:57:25
CKEditor 4 vulnerabilities in versions <4.16.1
2021-08-23 19:42:05
openvas
openvas
Ubuntu: Security Advisory (USN-5340-2)
2023-01-27 00:00:00
Ubuntu: Security Advisory (USN-5340-1)
2022-03-23 00:00:00
Fedora: Security Advisory for ckeditor (FEDORA-2021-51457da891)
2021-10-02 00:00:00
nessus
nessus
Ubuntu 16.04 ESM : CKEditor vulnerabilities (USN-5340-2)
2023-10-23 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : CKEditor vulnerabilities (USN-5340-1)
2022-03-22 00:00:00
Drupal 9.1.x < 9.1.12 Third-Party Library Vulnerability
2021-09-06 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: ckeditor-4.16.2-1.fc35
2021-09-24 20:59:27
[SECURITY] Fedora 33 Update: ckeditor-4.16.2-1.fc33
2021-09-29 01:10:13
[SECURITY] Fedora 34 Update: ckeditor-4.16.2-1.fc34
2021-09-29 01:10:12
github
github
CKEditor 4 vulnerabilities in versions <4.16.1
2021-08-23 19:42:05
ckeditor4 vulnerable to cross-site scripting
2021-06-21 17:16:42
Fake objects feature vulnerability allowing to execute JavaScript code using malformed HTML.
2021-08-23 19:42:15
ibm
ibm
Security Bulletin: Vulnerabilities in CKEditor library affects IBM Engineering Test Management (ETM) (CVE-2021-32809, CVE-2021-37695)
2023-09-21 09:50:25
Security Bulletin: B2B API of IBM Sterling B2B Integrator vulnerable to multiple issues due to CKEditor
2023-01-03 15:55:10
Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2020-28500, CVE-2021-23337, CVE-2020-8203
2023-04-24 14:55:04
debian
debian
[SECURITY] [DLA 2813-1] ckeditor security update
2021-11-09 08:52:03
veracode
veracode
Remote Code Execution (RCE)
2021-08-20 09:54:32
Command Injection
2021-08-19 08:55:23
Cross-site Scripting (XSS)
2020-03-09 03:15:29
ubuntucve
ubuntucve
CVE-2021-37695
2021-08-13 00:00:00
CVE-2021-32809
2021-08-12 00:00:00
CVE-2021-33829
2021-06-09 00:00:00
prion
prion
Design/Logic Flaw
2021-08-13 00:15:00
Design/Logic Flaw
2021-08-12 17:15:00
Cross site scripting
2021-06-09 12:15:00
cve
cve
CVE-2021-37695
2021-08-13 00:15:00
CVE-2021-32808
2021-08-12 17:15:00
CVE-2021-32809
2021-08-12 17:15:00
debiancve
debiancve
CVE-2021-32809
2021-08-12 17:15:00
CVE-2021-33829
2021-06-09 12:15:00
CVE-2021-37695
2021-08-13 00:15:00
archlinux
archlinux
[ASA-202106-35] drupal: cross-site scripting
2021-06-15 00:00:00
redhatcve
redhatcve
CVE-2021-37695
2022-05-20 23:58:59
CVE-2020-9281
2022-05-21 00:07:07
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2021-003
2021-05-26 00:00:00
fortinet
fortinet
FortiManager/FortiAnalyzer - XSS Vulnerability in Report Templates
2022-11-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

7.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.0%

JSON
Related for USN-5340-1
ubuntu1osv18openvas33nessus17fedora14github7ibm11debian1veracode5ubuntucve6prion7cve7debiancve4archlinux1redhatcve2drupal1fortinet1oracle7