Ckeditor: community verdicts

1 notable / known-exploited Ckeditor CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Ckeditor CVE, see NVD ↗.

CVE-2023-31541CRIT 9.8Real · low riskEPSS 2%
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.