Medium severity · published Nov 12, 2020
CVE-2020-27193
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and…
6.1
CVSS
2.1%
EPSS
No
On KEV
Description
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Agile Product Lifecycle Management · Oracle
9.3.5; 9.3.6 · source: NVD
AE
Application Express · Oracle
before 21.1.0.00.01 · source: NVD
BP
Banking Party Management · Oracle
2.7.0 · source: NVD
BP
Banking Platform · Oracle
2.4.0; 2.7.0; 2.7.1; 2.8.0; 2.9.0 · source: NVD
CK
Ckeditor · Ckeditor
4.15.0 · source: NVD
CM
Commerce Merchandising · Oracle
11.0.0; 11.1.0; 11.2.0; 11.3.0; 11.3.1; 11.3.2 · source: NVD
FS
Financial Services Analytical Applications Infrastructure · Oracle
8.0.6 through 8.0.9; 8.1.0; 8.1.1 · source: NVD
JE
JD Edwards Enterpriseone Tools · Oracle
before 9.2.6.0 · source: NVD
PE
Peoplesoft Enterprise Peopletools · Oracle
8.56; 8.57; 8.58 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-27193
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-27193
Release Notes
https://ckeditor.com/blog/CKEditor-4.15.1-with-a-security-patch-released/
Release Notes
https://ckeditor.com/cke4/release/CKEditor-4.15.1
Release Notes
https://ckeditor.com/ckeditor-4/download/
Patch
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
https://www.oracle.com/security-alerts/cpuApr2021.html
Patch
https://www.oracle.com/security-alerts/cpuoct2021.html
More from Ckeditor
9.8
CVE-2023-31541
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be…
7.5
CVE-2022-24729
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
7.5
CVE-2011-4972
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct…
6.5
CVE-2021-26272
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space…
6.5
CVE-2021-26271
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the…