Skip to Content (Press Enter)
UserImage.jpg
Danang Massandy
124Views
2Comments
Solved
[CKEditor.Reactive] Stored XSS vulnerability on CKEditor version 4.14.0
Question
Reactive
Forge
Security
ckeditor-reactive
Reactive icon
CKEditor.Reactive (O11)
Forge asset by Fábio Fantato
Application Type
Reactive

Hi,

We found a vulnerability by adding this script in Source option.

<p>Xss<!-- --!><img src=1 onerror=alert(`XSS`)>-->Attack</p>

I also found this article that recommends to upgrade the latest version of ckeditor 4.

How can we upgrade to latest version which is v4.19.0?

Thanks,

0
0
19 May 2022
Copy Link
UserImage.jpg
Danang Massandy
Solution

Hi all,

I tried using Fábio Fantato's answer from this thread to upgrade the ckeditor resources to current latest version (4.19.0) and it was successful. Attached is the modified oml.


CKEditorReactive_edited.oml
1
0
24 May 2022
Copy Link
2018-05-30 09-47-43
José Fábio Vieira
Staff

You can have all the security on the client-side but in the end, is not really secure!

I think the documentation of the component should be updated to force this security concern and awareness, because, you need to save the HTML in the database or somewhere else.

Before you save the HTML use the SanitizeHtml from Sanitization API 

0
0
15 Jun 2022
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.