TI-2021-22691 Aliases GHSA-cfcv-q4qq-2ph4

CKEditor 4 vulnerabilities in versions <4.16.1

LOW 38Published 2021-08-23 · Updated 2021-10-08

Key facts

Attack vector: —
Privileges required: —
User interaction: —
Attack complexity: —
Impact type: —
Confidentiality · integrity · availability: —
Fix status: Fixed

No CVSS vector from any source. Fix status from GitHub.

Summary

Details see: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc ( CVE-2021-37695 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c ( CVE-2021-32808 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg ( CVE-2021-32809 ) Patch: https://github.com/pimcore/pimcore/pull/10032

Why it matters now

Fix Fixed pimcore/pimcore (Packagist): 10.1.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	pimcore/pimcore (Packagist)	before 10.1.1	10.1.1	Patch available	GHSA-cfcv-q4qq-2ph4

pimcore/pimcore (Packagist) Vendor— Affected before 10.1.1 Fixed in 10.1.1 Patch available GHSA-cfcv-q4qq-2ph4

Remediation

Fix · GHSA-cfcv-q4qq-2ph4 pimcore/pimcore (Packagist) Fixed in 10.1.1 Advisory →

Timeline

2026-10-03 Threatist record created from GHSA-cfcv-q4qq-2ph4

References

Other 3

Sources

GHSA-cfcv-q4qq-2ph4 · GitHub Advisory Database · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences