ckeditor.com
https://ckeditor.com/blog/ckeditor-4.16.1-with-accessibility-enhancements CVE-2021-33829
MEDIUMNuclei
ckeditor4 vulnerable to cross-site scripting
Record summary
CVE-2021-33829 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.
Description
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
ckeditor4Browse npm / ckeditor4 | GitHub Advisory | 4.14.0 to < 4.16.1 · Fixed in 4.16.1 | affected |
drupal/coreBrowse Packagist / drupal/core | GitHub Advisory | 7.0.0 to < 7.80 · Fixed in 7.80 | affected |
| 8.0.0 to < 8.9.16 · Fixed in 8.9.16 | affected | ||
| 9.0.0 to < 9.0.14 · Fixed in 9.0.14 | affected | ||
| 9.1.0 to < 9.1.9 · Fixed in 9.1.9 | affected | ||
drupal/drupalBrowse Packagist / drupal/drupal | GitHub Advisory | 7.0.0 to < 7.80 · Fixed in 7.80 | affected |
| 8.0.0 to < 8.9.16 · Fixed in 8.9.16 | affected | ||
| 9.0.0 to < 9.0.14 · Fixed in 9.0.14 | affected | ||
| 9.1.0 to < 9.1.9 · Fixed in 9.1.9 | affected |
Nuclei templates
1ProjectDiscoveryMEDIUMDrupal 7 CKEditor XSSCVSS 6.1
CKEditor 4.14.0 through 4.16.x before 4.16.1 contains a reflected cross-site scripting caused by mishandling in comments, letting remote attackers inject executable JavaScript code, exploit requires victim to view malicious content.
Impact
Attackers can execute arbitrary JavaScript in the context of the victim's browser, leading to session hijacking or malicious actions.
Remediation
Update to version 4.16.1 or later.
WeaknessesCWE-79
Authors0x_Akoko
Template tagscvecve2021drupalckeditorxssauthenticated
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:ckeditor:ckeditor:*:*:*:*:*:*:*:*
Shodan: cpe:"cpe:2.3:a:ckeditor:ckeditor"
https://checkmarx.com/blog/cve-2021-33829-stored-xss-vulnerability-discovered-in-ckeditor4-affects-widely-used-cms/ https://www.drupal.org/sa-core-2021-003 https://lists.debian.org/debian-lts-announce/2021/11/msg00007.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T/
Source: ProjectDiscovery
References
Showing 12 of 14github.com
https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2021-33829.yaml github.com
https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2021-33829.yaml github.com
https://github.com/ckeditor/ckeditor4 [debian-lts-announce] 20211109 [SECURITY] [DLA 2813-1] ckeditor security updatemailing list
https://lists.debian.org/debian-lts-announce/2021/11/msg00007.html FEDORA-2021-51457da891Vendor advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T FEDORA-2021-72176a63a8Vendor advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UVOYN2WKDPLKCNILIGEZM236ABQASLGW FEDORA-2021-87578dca12Vendor advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WAGNWHFIQAVCP537KFFS2A2GDG66J7XD lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYA354LJP47KCVJMTUO77ZCX3ZK42G3T lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UVOYN2WKDPLKCNILIGEZM236ABQASLGW lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WAGNWHFIQAVCP537KFFS2A2GDG66J7XD nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-33829