CVE-2020-23066

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-23066
Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

14 May 2024, 21:15

Type Values Removed Values Added
CWE CWE-79
CVSS v2 : unknown
v3 : 6.1 		v2 : unknown
v3 : unknown
References
  • {'url': 'https://github.com/tinymce/tinymce/security/advisories/GHSA-27gm-ghr9-4v95', 'tags': ['Vendor Advisory'], 'source': 'cve@mitre.org'}
  • {'url': 'https://portswigger.net/daily-swig/xss-vulnerability-patched-in-tinymce', 'tags': ['Mitigation', 'Third Party Advisory'], 'source': 'cve@mitre.org'}
CPE cpe:2.3:a:tiny:tinymce:*:*:*:*:*:*:*:*
Summary (en) Cross Site Scripting vulnerability in TinyMCE v.4.9.6 and before and v.5.0.0 thru v.5.1.4 allows an attacker to execute arbitrary code via the editor function. (en) Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record.

05 Jul 2023, 13:51

Type Values Removed Values Added
References (MISC) https://github.com/tinymce/tinymce/security/advisories/GHSA-27gm-ghr9-4v95 - (MISC) https://github.com/tinymce/tinymce/security/advisories/GHSA-27gm-ghr9-4v95 - Vendor Advisory
References (MISC) https://portswigger.net/daily-swig/xss-vulnerability-patched-in-tinymce - (MISC) https://portswigger.net/daily-swig/xss-vulnerability-patched-in-tinymce - Mitigation, Third Party Advisory
First Time Tiny tinymce
Tiny
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1
CPE cpe:2.3:a:tiny:tinymce:*:*:*:*:*:*:*:*
CWE CWE-79

26 Jun 2023, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-26 19:15

Updated : 2024-05-14 21:15

NVD link : CVE-2020-23066

Mitre link : CVE-2020-23066

CVE.ORG link : CVE-2020-23066

JSON object : View

Products Affected

No product.

CWE

No CWE.