Description
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
Remediation
References
Related Vulnerabilities
Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3800)
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35258)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5341)
WordPress Plugin Gallery transformation SQL Injection (1.0)
Django Incorrect Default Permissions Vulnerability (CVE-2019-19118)