CVE-2021-26271

Fixed in a distro release EPSS 2%

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

Published 2021-01-26 · CVE record · OSV

Products: ckeditor, oracle agile_product_lifecycle_management, oracle application_express, oracle financial_services_analytical_applications_infrastructure, oracle jd_edwards_enterpriseone_tools, oracle siebel_ui_framework, oracle webcenter_sites

Fixed upstream

Distro releases