https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:41:22 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0992 certfr-2024-avi-0992 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0992 https://cve.radiocsirt.org/vuln/euvd-2026-190427 EUVD-2026-190427 https://cve.radiocsirt.org/vuln/euvd-2026-190427 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4771 <p>A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user&#39;s information.</p> <p>A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user&#39;s information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4771 https://cve.radiocsirt.org/vuln/ghsa-wh5w-82f3-wrxh <p><strong>Affected:</strong> npm: ckeditor4</p> <p>### Affected packages The vulnerability has been discovered in the AJAX sample available at the `samples/old/ajax.html` file location. All integrators that use that sample in the production code can be affected.</p> <p>### Impact</p> <p>A potential vulnerability has been discovered in one of CKEditor&#39;s 4 samples that are shipped with production code. The vulnerability allowed to execute JavaScript code by abusing the AJAX sample. It affects all users using the CKEditor 4 at version &lt; 4.24.0-lts where `samples/old/ajax.html` is used in a production environment.</p> <p>### Patches The problem has been recognized and patched. The fix will be available in version 4.24.0-lts.</p> <p>### For more information Email us at [security@cksource.com](mailto:security@cksource.com) if you have any questions or comments about this advisory.</p> <p>### Acknowledgements The CKEditor 4 team would like to thank Rafael Pedrero and INCIBE ([original report](https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cksource-ckeditor)) for recognizing and reporting this vulnerability.</p> <p><strong>Affected:</strong> npm: ckeditor4</p> <p>### Affected packages The vulnerability has been discovered in the AJAX sample available at the `samples/old/ajax.html` file location. All integrators that use that sample in the production code can be affected.</p> <p>### Impact</p> <p>A potential vulnerability has been discovered in one of CKEditor&#39;s 4 samples that are shipped with production code. The vulnerability allowed to execute JavaScript code by abusing the AJAX sample. It affects all users using the CKEditor 4 at version &lt; 4.24.0-lts where `samples/old/ajax.html` is used in a production environment.</p> <p>### Patches The problem has been recognized and patched. The fix will be available in version 4.24.0-lts.</p> <p>### For more information Email us at [security@cksource.com](mailto:security@cksource.com) if you have any questions or comments about this advisory.</p> <p>### Acknowledgements The CKEditor 4 team would like to thank Rafael Pedrero and INCIBE ([original report](https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cksource-ckeditor)) for recognizing and reporting this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-wh5w-82f3-wrxh https://cve.radiocsirt.org/vuln/gsd-2023-4771 gsd-2023-4771 https://cve.radiocsirt.org/vuln/gsd-2023-4771 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4771 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ckeditor, Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:16.04:LTS: request-tracker4, Ubuntu:Pro:18.04:LTS: ckeditor, Ubuntu:18.04:LTS: ckeditor3, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:Pro:18.04:LTS: request-tracker4, Ubuntu:Pro:20.04:LTS: ckeditor, Ubuntu:20.04:LTS: ckeditor3, Ubuntu:20.04:LTS: ldap-account-manager and 11 more</p> <p>A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user&#39;s information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ckeditor, Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:16.04:LTS: request-tracker4, Ubuntu:Pro:18.04:LTS: ckeditor, Ubuntu:18.04:LTS: ckeditor3, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:Pro:18.04:LTS: request-tracker4, Ubuntu:Pro:20.04:LTS: ckeditor, Ubuntu:20.04:LTS: ckeditor3, Ubuntu:20.04:LTS: ldap-account-manager and 11 more</p> <p>A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user&#39;s information.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4771