PT-2023-29708 · Tinymce · Tinymce

Ph5I · Published 2023-10-19 · Updated 2023-10-26 · CVE-2023-45819

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TinyMCE versions prior to 5.10.8 TinyMCE versions prior to 6.7.1

Description A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s Notification Manager API. The vulnerability exploits TinyMCE's unfiltered notification system, which is used in error handling. The conditions for this exploit require carefully crafted malicious content to have been inserted into the editor and a notification to have been triggered. When a notification was opened, the HTML within the text argument was displayed unfiltered in the notification. The vulnerability allowed arbitrary JavaScript execution when a notification was presented in the TinyMCE UI for the current user. This issue could also be exploited by any integration that uses a TinyMCE notification to display unfiltered HTML content.

Recommendations

• Upgrade to TinyMCE 5.10.8 or higher for TinyMCE 5.x.
• Upgrade to TinyMCE 6.7.1 or higher for TinyMCE 6.x.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-45819

GHSA-HGQX-R2HP-JR38

Affected Products

Tinymce

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45819.json · Exploit
• https://github.com/tinymce/tinymce/security/advisories/GHSA-hgqx-r2hp-jr38 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45819 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45819 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-45819 · Security Note
• https://osv.dev/vulnerability/GHSA-hgqx-r2hp-jr38 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-45819 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-45819 · Vendor Advisory
• https://github.com/tinymce/tinymce · Note
• https://tiny.cloud/docs/release-notes/release-notes5108/#securityfixes · Note
• https://t.me/cvenotify/59755 · Telegram Post
• https://twitter.com/CVEnew/status/1715116577790517365 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1715165984376435008 · Twitter Post
• https://tiny.cloud/docs/tinymce/6/6.7.1-release-notes/#security-fixes · Note
• https://twitter.com/philipsinnott/status/1716328125401858493 · Twitter Post