CVE-2020-27193
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
Improper Neutralization of Input During Web Page Generation in CKEditor4
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
References
- https://ckeditor.com/blog/CKEditor-4.15.1-with-a-security-patch-released/
- https://nvd.nist.gov/vuln/detail/CVE-2020-27193
- https://ckeditor.com/blog/CKEditor-4.15.1-with-a-security-patch-released
- https://ckeditor.com/cke4/release/CKEditor-4.15.1
- https://ckeditor.com/ckeditor-4/download
- https://github.com/ckeditor/ckeditor4
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
Verify integrity in audit chain (admin only). AS-IS.