Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CKSource vulnerabilities

3 published CVEs name CKSource among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20191
  2. 20231
  3. 20251

Newest CVEs

  • CVE-2016-20023

    In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided.

    CKSource · CKFinder

    Medium5.0
  • CVE-2023-4771

    Cross-Site Scripting vulnerability in CKSource CKEditor

    CKSource · CKEditor

    Medium6.1
  • CVE-2011-4972

    hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private…

    CKSource · CKEditor Drupal module

    High7.5

Products with the most CVEs

  1. CKEditor1
  2. CKEditor Drupal module1
  3. CKFinder1

Most common weaknesses

  1. CWE-200 Exposure of sensitive information1
  2. CWE-22 Path traversal1
  3. CWE-23 1
  4. CWE-79 Cross-site scripting (XSS)1