CVE:CVE-2021-32809
CNNVD:CNNVD-202108-1175
CKEditor是一套开源的、基于网页的文字编辑器。
CKEditor 4 [Clipboard]包中存在跨站脚本漏洞，该漏洞允许用户使用格式错误的 HTML 滥用粘贴功能，这可能导致将任意 HTML 注入编辑器。
solution:Upgrade ckeditor ckeditor to a higher version than 4.16.2,and avoid the version [4.5.2,4.16.2); Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade oracle application_express to a higher version than 21.1.4,and avoid the version (,21.1.4); Upgrade oracle banking_party_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle commerce_merchandising to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle documaker to a higher version than 12.6.3,12.6.4,and avoid the version 12.6.3,12.6.4; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.1,and avoid the version [8.0.7,8.1.1]; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.6.0,and avoid the version (,9.2.6.0); Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59