CVE:CVE-2021-33829
CNNVD:CNNVD-202106-726
CKEditor是一套开源的、基于网页的文字编辑器。
CKEditor 存在跨站脚本漏洞，该漏洞源于HTML数据处理器中对输入数据处理不当。远程攻击者可通过一个精心制作的注释注入可执行的JavaScript代码。以下产品及型号会受到影响：4 4.14.0至4.16版本。
solution:Upgrade ckeditor ckeditor to a higher version than 4.16.1,and avoid the version [4.14.0,4.16.1); Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade drupal drupal to a higher version than 8.9.16,9.0.14,9.1.9,and avoid the version [8.9.0,8.9.16),[9.0.0,9.0.14),[9.1.0,9.1.9); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0