PatchTheCVEimage uploader and browser for ckeditor vulnerabilities and fixes
Recent CVEs affecting image uploader and browser for ckeditor, with upgrade or downgrade steps. 1 tracked.
Also searched as: imageuploaderandbrowserforckeditor.
image uploader and browser for ckeditor has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-12-02. Highest priority: CVE-2019-19502 (score 59/100).
- CVE-2019-19502 CRITICAL 9.8 UPGRADE Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authe
FAQ
How do I fix image uploader and browser for ckeditor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is image uploader and browser for ckeditor being exploited right now?
None of the tracked image uploader and browser for ckeditor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which image uploader and browser for ckeditor CVE should I patch first?
CVE-2019-19502 currently ranks highest (59/100): Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authe.