PT-2019-14456 · Cksource · Ckfinder

Joshua Provoste · Publicado 2019-09-26 · Atualizado 2019-10-01 · CVE-2019-15891

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CKFinder versions 2.6.2.1 and earlier CKFinder versions 3.x through 3.5.0

Description The issue arises from misleading information in the documentation of CKFinder, which may lead to the incorrect assumption that the application has built-in content sniffing protection.

Recommendations For CKFinder versions 2.6.2.1 and earlier, update to a version later than 2.6.2.1. For CKFinder versions 3.x through 3.5.0, update to a version later than 3.5.0.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-15891

Produtos afetados

Ckfinder

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-15891 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15891 · Nota de Segurança
• https://ckeditor.com/blog/CKFinder-3.5.1-and-CKFinder-2.6.3-released · Nota