CVE-2023-45818

CVSS V2 None CVSS V3 None

Description

TinyMCE is an open source rich text editor. A mutation cross-site scripting (mXSS) vulnerability was discovered in TinyMCE’s core undo and redo functionality. When a carefully-crafted HTML snippet passes the XSS sanitisation layer, it is manipulated as a string by internal trimming functions before being stored in the undo stack. If the HTML snippet is restored from the undo stack, the combination of the string manipulation and reparative parsing by either the browser's native [DOMParser API](https://developer.mozilla.org/en-US/docs/Web/API/DOMParser) (TinyMCE 6) or the SaxParser API (TinyMCE 5) mutates the HTML maliciously, allowing an XSS payload to be executed. This vulnerability has been patched in TinyMCE 5.10.8 and TinyMCE 6.7.1 by ensuring HTML is trimmed using node-level manipulation instead of string manipulation. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Overview

CVE ID
CVE-2023-45818

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2023-10-19T21:18:01.297Z

Last Modified Date
2023-10-19T21:18:01.297Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

References

Reference URL	Reference Tags
https://github.com/tinymce/tinymce/security/advisories/GHSA-v65r-p3vv-jjfv	x_refsource_CONFIRM
https://researchgate.net/publication/266654651_mXSS_attacks_Attacking_well-secured_web-applications_by_using_innerHTML_mutations	x_refsource_MISC
https://tiny.cloud/docs/release-notes/release-notes5108/#securityfixes	x_refsource_MISC
https://tiny.cloud/docs/tinymce/6/6.7.1-release-notes/#security-fixes	x_refsource_MISC
https://www.tiny.cloud/docs/api/tinymce.html/tinymce.html.saxparser/	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-45818
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45818

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 09:53:38				Added to TrackCVE