cbcvebase.

Xwiki-Contrib Application-Ckeditor vulnerabilities

1 known vulnerability affecting xwiki-contrib/application-ckeditor.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2023-22457P2HIGHCVSS 8.8fixed in 1.64.32023-01-04
CVE-2023-22457 [HIGH] CWE-352 CVE-2023-22457: CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3 CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a protection against Cross-Site Request Forgery (CSRF), allowing to execute macros with the rights of the current user. If a privileged user with programming rights was tricked into executing a GET request
nvd
Xwiki-Contrib Application-Ckeditor vulnerabilities | cvebase