CVE-2021-33829
4 advisories.
Packagist/drupal/core CVE-2021-33829: unknown
**Update: 2021-06-11: Added CVE-2021-33829 identifier**
Action: Upgrade drupal/core to 8.9.16 or later.
composer require drupal/core:8.9.16composer require drupal/core:9.0.14composer require drupal/core:9.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.9.16 | - |
| 9.0.0 | 9.0.14 | - |
| 9.1.0 | 9.1.9 | - |
Fixed versions
| 8.9.16 | 9.0.14 | 9.1.9 |
Sources
CVE-2021-33829 · published · modified · JSON
npm/ckeditor4 CVE-2021-33829: medium 6.1
ckeditor4 vulnerable to cross-site scripting
Action: Upgrade ckeditor4 to 4.16.1 or later.
npm i ckeditor4@4.16.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.14.0 | 4.16.1 | - |
Fixed versions
| 4.16.1 |
Sources
- osv: GHSA-rgx6-rjj4-c388
- https://nvd.nist.gov/vuln/detail/CVE-2021-33829
- https://ckeditor.com/blog/ckeditor-4.16.1-with-accessibility-enhancements/#improvements-for-comments-in-html-parser
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2021-33829.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2021-33829.yaml
- https://github.com/ckeditor/ckeditor4
- https://lists.debian.org/debian-lts-announce/2021/11/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UVOYN2WKDPLKCNILIGEZM236ABQASLGW
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WAGNWHFIQAVCP537KFFS2A2GDG66J7XD
- https://www.drupal.org/sa-core-2021-003
- https://www.npmjs.com/package/ckeditor4
CVE-2021-33829 · published · modified · JSON
Packagist/drupal/core CVE-2021-33829: medium 6.1
ckeditor4 vulnerable to cross-site scripting
Action: Upgrade drupal/core to 7.80 or later.
composer require drupal/core:7.80composer require drupal/core:8.9.16composer require drupal/core:9.0.14composer require drupal/core:9.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.80 | - |
| 8.0.0 | 8.9.16 | - |
| 9.0.0 | 9.0.14 | - |
| 9.1.0 | 9.1.9 | - |
Fixed versions
| 7.80 | 8.9.16 | 9.0.14 | 9.1.9 |
Sources
- osv: GHSA-rgx6-rjj4-c388#Packagist/drupal/core
- https://nvd.nist.gov/vuln/detail/CVE-2021-33829
- https://ckeditor.com/blog/ckeditor-4.16.1-with-accessibility-enhancements/#improvements-for-comments-in-html-parser
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2021-33829.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2021-33829.yaml
- https://github.com/ckeditor/ckeditor4
- https://lists.debian.org/debian-lts-announce/2021/11/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UVOYN2WKDPLKCNILIGEZM236ABQASLGW
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WAGNWHFIQAVCP537KFFS2A2GDG66J7XD
- https://www.drupal.org/sa-core-2021-003
- https://www.npmjs.com/package/ckeditor4
CVE-2021-33829 · published · modified · JSON
Packagist/drupal/drupal CVE-2021-33829: medium 6.1
ckeditor4 vulnerable to cross-site scripting
Action: Upgrade drupal/drupal to 7.80 or later.
composer require drupal/drupal:7.80composer require drupal/drupal:8.9.16composer require drupal/drupal:9.0.14composer require drupal/drupal:9.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.80 | - |
| 8.0.0 | 8.9.16 | - |
| 9.0.0 | 9.0.14 | - |
| 9.1.0 | 9.1.9 | - |
Fixed versions
| 7.80 | 8.9.16 | 9.0.14 | 9.1.9 |
Sources
- osv: GHSA-rgx6-rjj4-c388#Packagist/drupal/drupal
- https://nvd.nist.gov/vuln/detail/CVE-2021-33829
- https://ckeditor.com/blog/ckeditor-4.16.1-with-accessibility-enhancements/#improvements-for-comments-in-html-parser
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2021-33829.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2021-33829.yaml
- https://github.com/ckeditor/ckeditor4
- https://lists.debian.org/debian-lts-announce/2021/11/msg00007.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UVOYN2WKDPLKCNILIGEZM236ABQASLGW
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WAGNWHFIQAVCP537KFFS2A2GDG66J7XD
- https://www.drupal.org/sa-core-2021-003
- https://www.npmjs.com/package/ckeditor4
CVE-2021-33829 · published · modified · JSON