Vulnerability Bulletins

Drupal core - Moderately critical - Third-party libraries - SA-CORE-2021-005


System information

   
Affected software Drupal

Description

Project: Drupal coreDate: 2021-August-12Security risk: Moderately critical 13∕25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Third-party librariesDescription: The Drupal project uses the CKEditor, library for WYSIWYG editing. CKEditor has released a security update that impacts Drupal.Vulnerabilities are possible if Drupal is configured to allow use of the CKEditor library for WYSIWYG editing. An attacker that can create or edit content (even without access to

More info:

https://www.drupal.org/sa-core-2021-005

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2022-05-26
Ministerio de Defensa
CNI
CCN
CCN-CERT