Medium severity · published Jan 26, 2021
CVE-2021-26271
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the…
6.5
CVSS
2%
EPSS
No
On KEV
Description
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Agile Product Lifecycle Management · Oracle
9.3.5; 9.3.6 · source: NVD
AE
Application Express · Oracle
before 21.1.0 · source: NVD
CK
Ckeditor · Ckeditor
4.0 before 4.16 · source: NVD
FS
Financial Services Analytical Applications Infrastructure · Oracle
8.0.6 through 8.0.9; 8.1.0; 8.1.1 · source: NVD
JE
JD Edwards Enterpriseone Tools · Oracle
before 9.2.6.0 · source: NVD
SU
Siebel UI Framework · Oracle
before 21.9 · source: NVD
WS
Webcenter Sites · Oracle
12.2.1.3.0; 12.2.1.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26271
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26271
Vendor Advisory
https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first
Release Notes
https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416
Patch
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
https://www.oracle.com/security-alerts/cpuoct2021.html
More from Ckeditor
9.8
CVE-2023-31541
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be…
7.5
CVE-2022-24729
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
7.5
CVE-2011-4972
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct…
6.5
CVE-2021-26272
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space…
6.1
CVE-2024-43407
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor