PT-2023-33004 · Tinymce+1 · Tinymce+1

Published 2023-12-08 · Updated 2023-12-08

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions TinyMCE versions prior to 20.2.0 OpenMage magento-lts versions prior to 20.2.0

Description The TinyMCE WYSIWYG editor fails to filter scripts when rendering HTML in specially crafted HTML tags, allowing for potential exploitation. This issue can be exploited using the onmouseover attribute of an img element.

Recommendations For TinyMCE versions prior to 20.2.0, upgrade to version 20.2.0 or later. For OpenMage magento-lts versions prior to 20.2.0, upgrade to version 20.2.0 or later. As a temporary workaround, consider disabling the WYSIWYG editor features in the configuration until a patch is available. Restrict access to potentially vulnerable modules to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

GHSA-9J5W-2CQC-CWJ9

Affected Products

Openmage Magento Lts

Tinymce

References · 6

• https://osv.dev/vulnerability/GHSA-9j5w-2cqc-cwj9 · Vendor Advisory
• https://github.com/OpenMage/magento-lts · Note
• https://github.com/OpenMage/magento-lts/security/advisories/GHSA-9j5w-2cqc-cwj9 · Note
• https://github.com/OpenMage/magento-lts/pull/3220 · Note
• https://github.com/OpenMage/magento-lts/releases/tag/v20.2.0 · Note
• https://hackerone.com/reports/1948040 · Note