Medium GHSA-cfcv-q4qq-2ph4

CKEditor 4 vulnerabilities in versions <4.16.1

Published Aug 23, 2021 · Updated Dec 2, 2024 · Assigned by GHSA

Package: pimcore/pimcore Ecosystem: Packagist

Description

Details see:

https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc ( CVE-2021-37695 )
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c ( CVE-2021-32808 )
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg ( CVE-2021-32809 )

Patch:
https://github.com/pimcore/pimcore/pull/10032

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	pimcore/pimcore	< 10.1.1	10.1.1	GHSA-cfcv-q4qq-2ph4

References