{"kind": "product", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "name": "ldap-account-manager", "product": "ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS", "items": [{"id": "CVE-2026-116688", "noindex": false, "published": "2026-10-27T19:36:28.906Z", "modified": "2026-10-27T19:36:28.906Z", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "severity": "high", "epss": 0.00497, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116688", "title": "CKEditor: Cross-site scripting (XSS) in the engine package", "description": "CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming style attribute values. Crafted editor content can thereby cause unauthorized JavaScript execution in the browser. This issue is fixed in versions 47.7.4 and 48.5.1.", "references": ["https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rh54-vffm-5fvp", "https://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0", "https://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-116687", "noindex": false, "published": "2026-10-27T19:33:11.074Z", "modified": "2026-10-27T19:33:11.074Z", "cvss": 3.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "severity": "low", "epss": 0.00252, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116687", "title": "CKEditor: Cross-site scripting (XSS) in the engine package", "description": "CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute attacker-controlled JavaScript in a browser context isolated from the origin of the application embedding the editor. This issue is fixed in versions 47.7.4 and 48.5.1.", "references": ["https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-v6mg-96c6-gmpq", "https://github.com/ckeditor/ckeditor5/commit/4d9c5bb34f63cd956d15ccafbe584e14280c86a0", "https://github.com/ckeditor/ckeditor5/commit/a750e38635db6a18c5b11599c09f4fd702850423"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-55167", "noindex": false, "published": "2026-10-14T18:23:26.148Z", "modified": "2026-10-20T01:48:49.540Z", "cvss": 4.2, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00206, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-55167", "title": "LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who has already completed valid password authentication can therefore retain the same signed WebAuthn ceremony state instead of consuming it once. The practical risk is limited by the requirement for a valid password, the same PHP session, and a valid authenticator signature. This issue is fixed in version 9.6.", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-xgjg-fchx-x3g3", "https://github.com/LDAPAccountManager/lam/commit/a56dcaab3e0f572283f5861404ed58d5ea301bc6", "https://github.com/LDAPAccountManager/lam/releases/tag/9.6"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-27895", "noindex": false, "published": "2026-03-17T23:51:26.501Z", "modified": "2026-03-18T19:55:14.059Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "severity": "medium", "epss": 0.00435, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-27895", "title": "LAM has incorrect regular expression in PDF export component that allows user to upload files of any type", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, the PDF export component does not correctly validate uploaded file extensions. This way any file type (including .php files) can be uploaded. With GHSA-w7xq-vjr3-p9cf, an attacker can achieve remote code execution as the web server user. Version 9.5 fixes the issue. Although upgrading is recommended, a workaround would be to make /var/lib/ldap-account-manager/config read-only for the web-server user.", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-88hf-2cjm-m9g8", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-w7xq-vjr3-p9cf", "https://github.com/LDAPAccountManager/lam/releases/tag/9.5"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-27894", "noindex": false, "published": "2026-03-17T23:48:06.530Z", "modified": "2026-03-18T19:54:13.831Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00386, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-27894", "title": "LAM has Authenticated Local File Inclusion (LFI) in PDF export", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with GHSA-88hf-2cjm-m9g8 this allows to execute arbitrary code. Users need to login to LAM to exploit this vulnerability. Version 9.5 fixes the issue. Although upgrading is recommended, a workaround would be to make /var/lib/ldap-account-manager/config read-only for the web-server user and delete the PDF profile files (making PDF exports impossible).", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-w7xq-vjr3-p9cf", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-88hf-2cjm-m9g8", "https://github.com/LDAPAccountManager/lam/releases/tag/9.5"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2026-28343", "noindex": false, "published": "2026-03-05T19:42:58.372Z", "modified": "2026-03-19T18:45:43.135Z", "cvss": 6.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "severity": "medium", "epss": 0.00284, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-28343", "title": "CKEditor: Cross-site scripting (XSS) in the HTML Support package", "description": "CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a cross-site scripting (XSS) vulnerability has been discovered in the General HTML Support feature. This vulnerability could be triggered by inserting specially crafted markup, leading to unauthorized JavaScript code execution, if the editor instance used an unsafe General HTML Support configuration. This issue has been patched in version 47.6.0.", "references": ["https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-jrqm-vmqc-gm93", "https://github.com/ckeditor/ckeditor5/releases/tag/v29.0.0", "https://github.com/ckeditor/ckeditor5/releases/tag/v47.6.0"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-61261", "noindex": false, "published": "2025-11-07T00:00:00.000Z", "modified": "2025-11-07T19:28:12.951Z", "cvss": 5.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00285, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-61261", "title": "CVE-2025-61261", "description": "A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.", "references": ["https://github.com/ckeditor/ckeditor5/releases/tag/v46.1.0", "https://senscybersecurity.nl/cve-2025-61261-explained/", "https://nvd.nist.gov/vuln/detail/CVE-2025-61261"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-58174", "noindex": false, "published": "2025-09-16T16:29:37.615Z", "modified": "2025-09-16T18:26:38.482Z", "cvss": 4.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00178, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-58174", "title": "LAM profile editor stored cross-site scripting vulnerability", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script (for example a script element). An authenticated user with permission to create or edit a profile can insert a script payload into the profile name and have it executed when the profile data is viewed in a browser. This issue is fixed in version 9.3. No known workarounds are mentioned.", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6gqg-wm9x-5x3m", "https://nvd.nist.gov/vuln/detail/CVE-2025-58174"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2025-25299", "noindex": false, "published": "2025-02-20T19:23:03.013Z", "modified": "2025-02-20T19:47:33.534Z", "cvss": 2.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00603, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-25299", "title": "Cross-site scripting (XSS) in the real-time collaboration package", "description": "CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within the document. It can lead to unauthorized JavaScript code execution, which might happen with a very specific editor and token endpoint configuration. This vulnerability affects only installations with Real-time collaborative editing enabled. The problem has been recognized and patched. The fix is available in version 44.2.1 (and above). Users are ad", "references": ["https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-j3mm-wmfm-mwvh", "https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html", "https://github.com/ckeditor/ckeditor5/releases/tag/v44.2.1"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-52792", "noindex": false, "published": "2024-12-17T21:46:27.319Z", "modified": "2024-12-18T15:37:01.733Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "severity": "medium", "epss": 0.00705, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-52792", "title": "Arbitrary config values override in lam", "description": "LDAP Account Manager (LAM) is a php webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In affected versions LAM does not properly sanitize configuration values, that are set via `mainmanage.php` and `confmain.php`. This allows setting arbitrary config values and thus effectively bypassing `mitigation` of CVE-2024-23333/GHSA-fm9w-7m7v-wxqv. Configuration values for the main config or server profiles are set via `mainmanage.php` and `confmain.php`.\nThe values are written to `config.cfg` or `serverprofile.conf` in the format of `settingsName: settingsValue` line-by-line.\nAn attacker can smuggle arbi", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6cp9-j5r7-xhcc", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-fm9w-7m7v-wxqv", "https://github.com/LDAPAccountManager/lam/blob/fd665fef3b222bf8205154b14f676815d2d6ae20/lam/templates/config/mainmanage.php#L263"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-45613", "noindex": false, "published": "2024-09-25T13:27:03.546Z", "modified": "2024-10-01T21:20:44.633Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "severity": "medium", "epss": 0.00524, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-45613", "title": "CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package", "description": "CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting (XSS) vulnerability is present in the CKEditor 5 clipboard package. This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code execution, if the attacker managed to insert a malicious content into the editor, which might happen with a very specific editor configuration. This vulnerability only affects installations where the Block Toolbar plugin is enabled and either the General HTML Support (with a configuration that permits unsafe markup) or the HTML Embed plugin is also en", "references": ["https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rgg8-g5x8-wr9v", "https://github.com/ckeditor/ckeditor5/releases/tag/v43.1.1", "https://nvd.nist.gov/vuln/detail/CVE-2024-45613"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-43411", "noindex": false, "published": "2024-08-21T15:17:24.176Z", "modified": "2024-08-22T13:51:02.904Z", "cvss": 3.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N", "severity": "low", "epss": 0.00427, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-43411", "title": "CKEditor4 has a low risk cross-site scripting (XSS) vulnerability from domain takeover", "description": "CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 (and above). In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they could potentially execute an attack on CKEditor 4 instances. The issue impacts only editor instances with enabled version notifications. Please note that this feature is disabled by default in all CKEditor 4 LTS versions. Therefore, if you use CKEditor 4 LTS, it is highly unlikely that you are affected by this vulnerability. If you are unsure, please contact us. The fix is available in ver", "references": ["https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6v96-m24v-f58j", "https://github.com/ckeditor/ckeditor4/commit/b5069c9cb769ea22eae1cbd7200f22b1cf2e3a7f", "https://nvd.nist.gov/vuln/detail/CVE-2024-43411"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-23333", "noindex": false, "published": "2024-03-18T21:07:09.513Z", "modified": "2024-08-21T15:04:56.308Z", "cvss": 7.9, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H", "severity": "high", "epss": 0.1775, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-23333", "title": "LAM vulnerable to Authenticated Remote Code Execution", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log files. Prior to version 8.7, an attacker could exploit this by creating a PHP file and cause LAM to log some PHP code to this file. When the file is then accessed via web the code would be executed. The issue is mitigated by the following: An attacker needs to know LAM's master configuration password to be able to change the main settings; and the webserver needs write access to a directory that is accessible via web. LAM itself does not provide any such directories. The issue has been", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-fm9w-7m7v-wxqv", "https://github.com/LDAPAccountManager/lam/releases/tag/8.7", "https://nvd.nist.gov/vuln/detail/CVE-2024-23333"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-24816", "noindex": false, "published": "2024-02-07T16:58:24.564Z", "modified": "2024-08-01T23:28:12.611Z", "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "severity": "medium", "epss": 0.01652, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-24816", "title": "Cross-site scripting (XSS) vulnerability in samples with enabled the preview feature", "description": "CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability vulnerability has been discovered in versions prior to 4.24.0-lts in samples that use the `preview` feature. All integrators that use these samples in the production code can be affected. The vulnerability allows an attacker to execute JavaScript code by abusing the misconfigured preview feature. It affects all users using the CKEditor 4 at version < 4.24.0-lts with affected samples used in a production environment. A fix is available in version 4.24.0-lts.", "references": ["https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-mw2c-vx6j-mg76", "https://github.com/ckeditor/ckeditor4/commit/8ed1a3c93d0ae5f49f4ecff5738ab8a2972194cb", "https://ckeditor.com/cke4/addon/preview"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2024-24815", "noindex": false, "published": "2024-02-07T15:14:32.361Z", "modified": "2025-02-13T17:40:30.582Z", "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "severity": "medium", "epss": 0.00706, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-24815", "title": "CKEditor4 Cross-site scripting (XSS) vulnerability caused by incorrect CDATA detection", "description": "CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in versions of CKEditor4 prior to 4.24.0-lts. It may affect all editor instances that enabled full-page editing mode or enabled CDATA elements in Advanced Content Filtering configuration (defaults to `script` and `style` elements). The vulnerability allows attackers to inject malformed HTML content bypassing Advanced Content Filtering mechanism, which could result in executing JavaScript code. An attacker could abuse faulty CDATA content detection and use it to prepare an intentional at", "references": ["https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-fq6h-4g8v-qqvm", "https://github.com/ckeditor/ckeditor4/commit/8ed1a3c93d0ae5f49f4ecff5738ab8a2972194cb", "https://ckeditor.com/docs/ckeditor4/latest/api/CKEDITOR_dtd.html#property-S-cdata"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2023-4771", "noindex": false, "published": "2023-11-16T14:08:47.418Z", "modified": "2024-10-01T14:50:24.839Z", "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "severity": "medium", "epss": 0.00878, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-4771", "title": "Cross-Site Scripting vulnerability in CKSource CKEditor", "description": "A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.", "references": ["https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cksource-ckeditor", "https://nvd.nist.gov/vuln/detail/CVE-2023-4771"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2023-28439", "noindex": false, "published": "2023-03-22T20:55:00.208Z", "modified": "2025-02-13T16:48:42.069Z", "cvss": 4.7, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "severity": "medium", "epss": 0.00725, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-28439", "title": "ckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying process", "description": "CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Media Embed packages. The vulnerability may trigger a JavaScript code after fulfilling special conditions: using one of the affected packages on a web page with missing proper Content Security Policy configuration; initializing the editor on an element and using an element other than `<textarea>` as a base; and destroying the editor instance. This vulnerability might affect a small percentage of integrators that depend on dynamic editor initialization/destroy mechanism.\n\nA fix is available ", "references": ["https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-vh5c-xwqv-cv9g", "https://ckeditor.com/cke4/addon/embed", "https://ckeditor.com/cke4/addon/iframe"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2023-27560", "noindex": false, "published": "2023-03-03T00:00:00.000Z", "modified": "2025-03-06T20:19:00.544Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00808, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-27560", "title": "CVE-2023-27560", "description": "Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.", "references": ["https://github.com/phpseclib/phpseclib/commit/6298d1cd55c3ffa44533bd41906caec246b60440", "https://github.com/phpseclib/phpseclib/releases/tag/3.0.19", "https://nvd.nist.gov/vuln/detail/CVE-2023-27560"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2023-22457", "noindex": false, "published": "2023-01-04T14:24:39.871Z", "modified": "2025-03-10T21:33:09.143Z", "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.19284, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-22457", "title": "org.xwiki.contrib:application-ckeditor-ui vulnerable to Remote Code Execution via Cross-Site Request Forgery", "description": "CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a protection against Cross-Site Request Forgery (CSRF), allowing to execute macros with the rights of the current user. If a privileged user with programming rights was tricked into executing a GET request to this document with certain parameters (e.g., via an image with a corresponding URL embedded in a comment or via a redirect), this would allow arbitrary remote code execution and the attacker could gain rights, access private information or impact the availability of the wiki. The issue has bee", "references": ["https://github.com/xwiki-contrib/application-ckeditor/security/advisories/GHSA-6mjp-2rm6-9g85", "https://github.com/xwiki-contrib/application-ckeditor/commit/6b1053164386aefc526df7512bc664918aa6849b", "https://jira.xwiki.org/browse/CKEDITOR-475"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}, {"id": "CVE-2022-31175", "noindex": false, "published": "2022-08-03T19:05:13.000Z", "modified": "2025-04-23T17:54:13.307Z", "cvss": 5.8, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L", "severity": "medium", "epss": 0.00883, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-31175", "title": "Cross-site scripting caused by the editor instance destroying process in ckeditor5", "description": "CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's packages in versions prior to 35.0.1. The vulnerability allowed to trigger a JavaScript code after fulfilling special conditions. The affected packages are `@ckeditor/ckeditor5-markdown-gfm`, `@ckeditor/ckeditor5-html-support`, and `@ckeditor/ckeditor5-html-embed`. The specific conditions are 1) Using one of the affected packages. In case of `ckeditor5-html-support` and `ckeditor5-html-embed`, additionally, it was required to use a configuration that allows unsafe markup inside the editor. 2) Destroying t", "references": ["https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-42wq-rch8-6f6j", "https://ckeditor.com/docs/ckeditor5/latest/features/general-html-support.html", "https://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}]}], "total": 33, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "ldap-account-manager", "path": "vulns/ubuntu-16.04-lts/ldap-account-manager", "ecosystem": "Ubuntu:16.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 3, "kev": 0}, "lastmod": "2026-10-27T19:36:28.906Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}