CVE-2022-24729 Regular expression Denial of Service in dialog plugin
An attacker can cause a browser tab freeze in CKEditor4 by exploiting a regular expression in the dialog plugin, requiring an upgrade to fix.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-24729?
CVE-2022-24729 is a medium-severity denial of service vulnerability in Drupal Drupal, published on 16 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a browser tab freeze. A patch is available in version 4.18.0. There are currently no known workarounds.
Which versions are affected by CVE-2022-24729?
It affects 9 products.
Products include Ckeditor Ckeditor, Drupal Drupal, Fedoraproject Fedora, Oracle Application Express, Oracle Commerce Merchandising, Oracle Financial Services Analytical Applications Infrastructure and 3 more.
How do I fix CVE-2022-24729?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-24729 being exploited?
There is no known exploitation of CVE-2022-24729 in the wild and no public exploit code.
Other vulnerabilities in Drupal Drupal
- CVE-2023-31541 File upload in n/a
- CVE-2021-41164 Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
- CVE-2021-41165 HTML comments vulnerability allowing to execute JavaScript code
- CVE-2021-32808 Cross-site scripting in ckeditor via abuse of undo functionality
- CVE-2011-4972 Missing authorization in CKEditor Drupal module
Sources
Also known as DEBIAN-CVE-2022-24729, UBUNTU-CVE-2022-24729.