Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-33829 →
DEBIAN-CVE-2021-33829
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inj...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ckeditor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0+dfsg-2"}]}]
Debian:12
ckeditor3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org