CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a browser tab freeze. A patch is available in version 4.18.0. There are currently no known workarounds.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ckeditor ckeditor |
||
drupal drupal |
||
oracle peoplesoft enterprise peopletools 8.58 |
||
oracle peoplesoft enterprise peopletools 8.59 |
||
oracle commerce merchandising 11.3.2 |
||
oracle financial services trade-based anti money laundering 8.0.7 |
||
oracle financial services trade-based anti money laundering 8.0.8 |
||
fedoraproject fedora 36 |
||
oracle financial services analytical applications infrastructure 8.1.2.0 |
||
oracle financial services analytical applications infrastructure 8.1.1.0 |
||
oracle application express |
||
oracle financial services analytical applications infrastructure 8.1.2.1 |
||
oracle financial services behavior detection platform |
||
oracle financial services analytical applications infrastructure |
||
oracle financial services behavior detection platform 8.0.8.0 |
||
oracle financial services behavior detection platform 8.0.7.0 |
||
fedoraproject fedora 37 |
Vulmon