-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| drupal/core | composer | >= 8.0.0, < 8.9.18 | 8.9.18 |
| drupal/core | composer | >= 9.1.0, < 9.1.12 | 9.1.12 |
| drupal/core | composer | >= 9.2.0, < 9.2.4 | 9.2.4 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability stems from Drupal's integration of a vulnerable CKEditor library version rather than specific functions in Drupal core. The advisory indicates the XSS vulnerabilities exist when using outdated CKEditor versions, and the fix involves updating CKEditor via Drupal's dependency management. No specific Drupal core functions are explicitly mentioned in the provided vulnerability details, commit diffs, or patch information. The root cause is the third-party library's vulnerability, not identifiable Drupal functions with high confidence.
Ongoing coverage of React2Shell