PT-2023-12118 · Unknown · Margox Braft-Editor

Testivy · Published 2023-08-11 · Updated 2023-08-17 · CVE-2021-27524

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions margox braft-editor version 2.3.8

Description The issue is a Cross Site Scripting (XSS) vulnerability that allows remote attackers to execute arbitrary code via the embed media feature. This can lead to unauthorized access and malicious activities on the affected system.

Recommendations For margox braft-editor version 2.3.8, update to a version that fixes the XSS vulnerability in the embed media feature. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-27524

GHSA-JFRF-VV54-J2JG

Affected Products

Margox Braft-Editor

References · 7

• 🔥 https://github.com/margox/braft-editor/issues/880 · Exploit
• https://osv.dev/vulnerability/CVE-2021-27524 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27524 · Security Note
• https://osv.dev/vulnerability/GHSA-jfrf-vv54-j2jg · Vendor Advisory
• https://github.com/margox/braft-editor · Note
• https://twitter.com/CVEnew/status/1690264367399411712 · Twitter Post
• https://t.me/cibsecurity/68362 · Telegram Post