cnvd - cnvd-2021-93368

cnvd-2021-93368

Vulnerability from cnvd

Title: CKEditor跨站脚本漏洞（CNVD-2021-93368）

Description:

CKEditor是一套开源的、基于网页的文字编辑器。

CKEditor存在跨站脚本漏洞，该漏洞允许攻击者绕过内容清理注入格式错误的HTML，这可能会导致执行 JavaScript 代码。目前没有详细的漏洞细节提供。

Severity: 低

Patch Name: CKEditor跨站脚本漏洞（CNVD-2021-93368）的补丁

Patch Description:

CKEditor是一套开源的、基于网页的文字编辑器。

CKEditor存在跨站脚本漏洞，该漏洞允许攻击者绕过内容清理注入格式错误的HTML，这可能会导致执行 JavaScript 代码。目前没有详细的漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41164

Impacted products

Name
CKEditor CKEditor >=4.0，<4.17.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-41164",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-41164"
    }
  },
  "description": "CKEditor\u662f\u4e00\u5957\u5f00\u6e90\u7684\u3001\u57fa\u4e8e\u7f51\u9875\u7684\u6587\u5b57\u7f16\u8f91\u5668\u3002\n\nCKEditor\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u5141\u8bb8\u653b\u51fb\u8005\u7ed5\u8fc7\u5185\u5bb9\u6e05\u7406\u6ce8\u5165\u683c\u5f0f\u9519\u8bef\u7684HTML\uff0c\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u6267\u884c JavaScript \u4ee3\u7801\u3002 \u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-93368",
  "openTime": "2021-12-02",
  "patchDescription": "CKEditor\u662f\u4e00\u5957\u5f00\u6e90\u7684\u3001\u57fa\u4e8e\u7f51\u9875\u7684\u6587\u5b57\u7f16\u8f91\u5668\u3002\r\n\r\nCKEditor\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u5141\u8bb8\u653b\u51fb\u8005\u7ed5\u8fc7\u5185\u5bb9\u6e05\u7406\u6ce8\u5165\u683c\u5f0f\u9519\u8bef\u7684HTML\uff0c\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u6267\u884c JavaScript \u4ee3\u7801\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "CKEditor\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2021-93368\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "CKEditor CKEditor \u003e=4.0\uff0c\u003c4.17.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-41164",
  "serverity": "\u4f4e",
  "submitTime": "2021-11-18",
  "title": "CKEditor\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2021-93368\uff09"
}

CVE-2021-41164 (GCVE-0-2021-41164)

Vulnerability from cvelistv5

Published

2021-11-17 00:00

Modified

2024-08-04 02:59

Severity ?

8.2 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Summary

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.

References

▼	URL	Tags
	https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj
	https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417
	https://www.oracle.com/security-alerts/cpujan2022.html
	https://www.drupal.org/sa-core-2021-011
	https://www.oracle.com/security-alerts/cpuapr2022.html
	https://www.oracle.com/security-alerts/cpujul2022.html
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOZGMCYDB2OKKULFXZKM6V7JJW4ZZHJP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VR76VBN5GW5QUBJFHVXRX36UZ6YTCMW6/	vendor-advisory

Impacted products

	Vendor	Product	Version
	ckeditor	ckeditor4	Version: < 4.17.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:59:31.641Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.drupal.org/sa-core-2021-011"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "name": "FEDORA-2022-b61dfd219b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOZGMCYDB2OKKULFXZKM6V7JJW4ZZHJP/"
          },
          {
            "name": "FEDORA-2022-4c634ee466",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VR76VBN5GW5QUBJFHVXRX36UZ6YTCMW6/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ckeditor4",
          "vendor": "ckeditor",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 4.17.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version \u003c 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-14T00:00:00",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "url": "https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-pvmx-g8h5-cprj"
        },
        {
          "url": "https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-417"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
        },
        {
          "url": "https://www.drupal.org/sa-core-2021-011"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "name": "FEDORA-2022-b61dfd219b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOZGMCYDB2OKKULFXZKM6V7JJW4ZZHJP/"
        },
        {
          "name": "FEDORA-2022-4c634ee466",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VR76VBN5GW5QUBJFHVXRX36UZ6YTCMW6/"
        }
      ],
      "source": {
        "advisory": "GHSA-pvmx-g8h5-cprj",
        "discovery": "UNKNOWN"
      },
      "title": "Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2021-41164",
    "datePublished": "2021-11-17T00:00:00",
    "dateReserved": "2021-09-15T00:00:00",
    "dateUpdated": "2024-08-04T02:59:31.641Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted