Details
-
Type:
Improvement
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: EE-4.3.0.GA_P04, EE-3.3.0.GA_P10
-
Fix Version/s: EE-4.3.0.GA_P05, EE-3.3.0.GA_P11
-
Component/s: ACE-Components
-
Labels:None
-
Environment:Any
Description
A supported customer recently brought to our attention that a Black Duck security scan reported that our CKEditor code, version 4.5.8, contains the vulnerability CVE-2022-24728, which is described as "CKEditor contains a code injection vulnerability in the core HTML processing module. This could allow an attacker to inject malformed HTML in order to execute JavaScript code."
This JIRA is to find a way to mitigate or eliminate this vulnerability in the most appropriate and feasible way.
This JIRA is to find a way to mitigate or eliminate this vulnerability in the most appropriate and feasible way.
Activity
- All
- Comments
- History
- Activity
- Remote Attachments
- Subversion
Field | Original Value | New Value |
---|---|---|
Assignee | Arturo Zambrano [ artzambrano ] |
Fix Version/s | EE-4.3.0.GA_P05 [ 14073 ] | |
Fix Version/s | EE-3.3.0.GA_P11 [ 14074 ] |
Status | Open [ 1 ] | Resolved [ 5 ] |
Resolution | Fixed [ 1 ] |