PT-2018-19082 · Drupal+3 · Drupal+3

Kyaw Min Thein · Publicado 2018-04-19 · Atualizado 2022-05-14 · CVE-2018-9861

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CKEditor versions 4.5.10 through 4.9.1 Drupal 8 versions prior to 8.4.7 Drupal 8.5.x versions prior to 8.5.2

Description The issue allows remote attackers to inject arbitrary web script through a crafted IMG element, resulting in a cross-site scripting (XSS) vulnerability. This occurs because the Enhanced Image plugin for CKEditor does not properly validate user input.

Recommendations For CKEditor versions 4.5.10 through 4.9.1, update to version 4.9.2 to resolve the issue. For Drupal 8 versions prior to 8.4.7, update to version 8.4.7 or later. For Drupal 8.5.x versions prior to 8.5.2, update to version 8.5.2 or later. As a temporary workaround, consider disabling the Enhanced Image plugin until a patch is available. Restrict access to the image2 plugin to minimize the risk of exploitation. Avoid using crafted IMG elements in the affected API endpoints until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-9861

DRUPAL-CORE-2018-003

GHSA-G78H-PF65-46RV

USN-5340-1

USN-5340-2

Produtos afetados

Ckeditor

Drupal

Linuxmint

Ubuntu

Referências · 22

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-9861.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-9861.yaml · Exploit
• https://github.com/ckeditor/ckeditor-dev/blob/master/CHANGES.md · Nota
• https://cve.org/CVERecord?id=CVE-2018-9861 · Nota de Segurança
• https://osv.dev/vulnerability/USN-5340-2 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-5340-1 · Aviso do Fabricante
• https://t.me/defcon_news/19407 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-9861 · Nota de Segurança
• http://securityfocus.com/bid/103924 · Nota
• https://drupal.org/sa-core-2018-003 · Nota
• https://ubuntu.com/security/CVE-2021-32808 · Aviso do Fabricante
• https://oracle.com/technetwork/security-advisory/cpujul2019-5072835.html · Nota
• https://ubuntu.com/security/notices/USN-5340-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2021-33829 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-9861 · Aviso do Fabricante