CVE:CVE-2023-31541
CNNVD:CNNVD-202306-948
CKEditor是一套开源的、基于网页的文字编辑器。
CKEditor v1.2.3版本存在安全漏洞，该漏洞源于Browse and upload images功能允许将任意文件上传到服务器。
solution:Upgrade ckeditor ckeditor to a higher version than 1.2.3,and avoid the version 1.2.3