npm/ckeditor CVE-2018-17960: medium 6.1, EPSS 1.95%
Ckeditor XSS Vulnerability
Action: Upgrade ckeditor to 4.11.0 or later.
npm i ckeditor@4.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.11.0 | - |
Fixed versions
| 4.11.0 |
Sources
- osv: GHSA-g68x-vvqq-pvw3
- https://nvd.nist.gov/vuln/detail/CVE-2018-17960
- https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
- https://ckeditor.com/cke4/release/CKEditor-4.11.0
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
- https://github.com/advisories/GHSA-g68x-vvqq-pvw3
- https://typo3.org/security/advisory/typo3-core-sa-2018-005
- https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE-2018-17960 · published · modified · JSON