CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the preview feature. All integrators that use these samples in the production code can be affected. The vulnerability allows an attacker to execute JavaScript code by abusing the misconfigured preview feature. It affects all users using the CKEditor 4 at version < 4.24.0-lts with affected samples used in a production environment. A fix is available in version 4.24.0-lts.
{
"binaries": [
{
"binary_version": "4.2.12-5",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.2.12-5",
"binary_name": "rt4-standalone"
}
]
}{
"binaries": [
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.4.3-2+deb10u3build0.20.04.1",
"binary_name": "rt4-standalone"
}
]
}{
"binaries": [
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.4.4+dfsg-2ubuntu1.22.04.1",
"binary_name": "rt4-standalone"
}
]
}{
"binaries": [
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.4.7+dfsg-1",
"binary_name": "rt4-standalone"
}
]
}{
"binaries": [
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-standalone"
}
]
}{
"binaries": [
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.4.7+dfsg-4syncable1",
"binary_name": "rt4-standalone"
}
]
}{
"binaries": [
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "request-tracker4"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-apache2"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-clients"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-db-mysql"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-db-postgresql"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-db-sqlite"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-doc-html"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-fcgi"
},
{
"binary_version": "4.4.2-2ubuntu0.1~esm1",
"binary_name": "rt4-standalone"
}
]
}