← Database

CVE-2022-24729

MEDIUM CVSS: 6.5 Published: 2022-03-16 Modified: 2026-06-17

Description

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a browser tab freeze. A patch is available in version 4.18.0. There are currently no known workarounds.

Affected Platforms

Ckeditor CkeditorOracle Application ExpressDrupal DrupalOracle Commerce MerchandisingOracle Peoplesoft Enterprise PeopletoolsFedoraproject FedoraOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection PlatformOracle Financial Services Trade-Based Anti Money Laundering

Weakness Type

CWE-400, CWE-1333

References