CVE-2026-96392
2026-10-22
01h21 +00:00
01h21 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improper Neutralization of Special Elements Used in a Template Engine The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine. |
