| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/ckeditor5_premium_features | ≥ 1.3.0, < 1.3.6≥ 1.4.0, < 1.4.3≥ 1.5.0, < 1.5.1≥ 1.6.0, < 1.6.4< 1.2.10 | 1.3.61.4.31.5.11.6.41.2.10 |
| ckeditor 5 premium features | = 1.5.0≥ 1.3.0, < 1.3.6≥ 1.4.0, < 1.4.3≥ 1.6.0, < 1.6.4< 1.2.10 | 1.3.61.4.31.6.41.2.10 |
The module provides instant integration of the official CKEditor 5 Premium plugins into the Drupal editor configuration.
This module has a path traversal vulnerability, which allows an access bypass to restricted image files in the system.
This access bypass is possible for any account with a View published content permission, but the risk is mitigated by the fact that only images can be opened.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free