GitHub Advisoryadvisory · npm, Packagist

GHSA-g68x-vvqq-pvw3 Ckeditor XSS Vulnerability

MEDIUM Published 2018-11-21 Modified 2023-09-08 Official page ↗
Aliases
CVE-2018-17960
Ecosystem
npm, Packagist
Packages
ckeditor, typo3/cms-core, typo3/cms
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2020-06-16

Affected packages

• npm ckeditor: < 4.11.0 → fixed in 4.11.0 • Packagist typo3/cms-core: >= 8.0.0, < 8.7.21 → fixed in 8.7.21 • Packagist typo3/cms-core: >= 9.0.0, < 9.5.2 → fixed in 9.5.2 • Packagist typo3/cms: >= 8.0.0, < 8.7.21 → fixed in 8.7.21 • Packagist typo3/cms: >= 9.0.0, < 9.5.2 → fixed in 9.5.2

Description

CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste. It was possible to execute XSS inside the CKEditor source area after persuading the victim to: (i) switch CKEditor to source mode, then (ii) paste a specially crafted HTML code, prepared by the attacker, into the opened CKEditor source area, and (iii) switch back to WYSIWYG mode. Although this is an unlikely scenario, it is recommended to upgrade to the latest editor version.

Related

Alias · CVE (1)

  • CVE-2018-17960 CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References