PT-2018-19082 · Drupal+3 · Drupal+3

Kyaw Min Thein · Published 2018-04-19 · Updated 2022-05-14 · CVE-2018-9861

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CKEditor versions 4.5.10 through 4.9.1 Drupal 8 versions prior to 8.4.7 Drupal 8.5.x versions prior to 8.5.2

Description The issue allows remote attackers to inject arbitrary web script through a crafted IMG element, resulting in a cross-site scripting (XSS) vulnerability. This occurs because the Enhanced Image plugin for CKEditor does not properly validate user input.

Recommendations For CKEditor versions 4.5.10 through 4.9.1, update to version 4.9.2 to resolve the issue. For Drupal 8 versions prior to 8.4.7, update to version 8.4.7 or later. For Drupal 8.5.x versions prior to 8.5.2, update to version 8.5.2 or later. As a temporary workaround, consider disabling the Enhanced Image plugin until a patch is available. Restrict access to the image2 plugin to minimize the risk of exploitation. Avoid using crafted IMG elements in the affected API endpoints until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-9861

DRUPAL-CORE-2018-003

GHSA-G78H-PF65-46RV

USN-5340-1

USN-5340-2

Affected Products

Ckeditor

Drupal

Linuxmint

Ubuntu

References · 22

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-9861.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-9861.yaml · Exploit
• https://cve.org/CVERecord?id=CVE-2018-9861 · Security Note
• https://osv.dev/vulnerability/USN-5340-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5340-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-9861 · Security Note
• https://ubuntu.com/security/CVE-2021-32808 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5340-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33829 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-9861 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5340-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g78h-pf65-46rv · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32809 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-9281 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-37695 · Vendor Advisory