CVE-2020-27783

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.

References

Affected packages

Git / github.com/ckeditor/ckeditor4

Affected ranges

Type: GIT
Repo: https://github.com/ckeditor/ckeditor4
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

20af9170ae28e4b75fd25a30100e1a0ee2e4b2f2

Affected versions

4.*

4.0

4.0.0

4.0.1

4.0.1.1

4.0.2

4.0.3

4.1

4.1.0

4.1.1

4.1.2

4.1.3

4.1rc

4.2

4.2.0

4.2.1

4.2.2

4.2.3

4.3.0

4.3.1

4.3.2

4.3.3

4.3.4

4.3.5

4.3beta

4.4.0

4.4.1

4.4.2

4.4.3

4.4.4

4.4.5

4.4.6

4.4.7

4.4.8

4.5.0

4.5.0-beta

4.5.1

4.5.10

4.5.11

4.5.2

4.5.3

4.5.4

4.5.5

4.5.6

4.5.7

4.5.8

4.5.9

4.6.0

4.6.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-27783.json"