PT-2023-12118 · Unknown · Margox Braft-Editor

Testivy · Publicado 2023-08-11 · Atualizado 2023-08-17 · CVE-2021-27524

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions margox braft-editor version 2.3.8

Description The issue is a Cross Site Scripting (XSS) vulnerability that allows remote attackers to execute arbitrary code via the embed media feature. This can lead to unauthorized access and malicious activities on the affected system.

Recommendations For margox braft-editor version 2.3.8, update to a version that fixes the XSS vulnerability in the embed media feature. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2021-27524

GHSA-JFRF-VV54-J2JG

Produtos afetados

Margox Braft-Editor

Referências · 7

• 🔥 https://github.com/margox/braft-editor/issues/880 · Exploit
• https://github.com/margox/braft-editor · Nota
• https://twitter.com/CVEnew/status/1690264367399411712 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2021-27524 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-27524 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-jfrf-vv54-j2jg · Aviso do Fabricante
• https://t.me/cibsecurity/68362 · Publicação no Telegram