CVE-2021-26271

MediumCVSS 6.5/10Last modified Aug 25, 2026

Description

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-829

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-firstVendor Advisory
https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416Release Notes, Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.htmlPatch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.htmlPatch, Third Party Advisory
https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-firstVendor Advisory
https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416Release Notes, Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.htmlPatch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.htmlPatch, Third Party Advisory

Timeline

Published: Jan 26, 2021
Last modified: Aug 25, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-262726.5It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the CVE-2021-262737.8The Agent in NinjaRMM 5.0.909 has Incorrect Access Control.CVE-2021-262747.1The Agent in NinjaRMM 5.0.909 has Insecure Permissions.CVE-2021-262759.8The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnera CVE-2021-262765.3scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set comma CVE-2021-262779.8The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged acti CVE-2021-262786.3The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.CVE-2021-262795.9Some parameters of the weather module are improperly stored, leaking some sensitive information.CVE-2021-262807.9Locally installed application can bypass the permission check and perform system operations that require permission.CVE-2021-262815.5Some parameters of the alarm clock module are improperly stored, leaking some sensitive information.CVE-2021-262919.1Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, r CVE-2021-262939.8An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversa