[GHSA-4849-cfqq-r8pq] Multiple directory traversal vulnerabilities in FCKeditor...

[anonymous4ACL24]

Updates

• Affected products
• Summary

Comments
The vulnerability directly mentions the affected python package FCKeditor, and the affected folder is https://github.com/treadmillian/fckeditor/tree/master/editor/filemanager/browser/default/connectors now, corresponding to the package Products.FCKeditor (the full name of FCKeditor).

[darakian]

Can you elaborate on how you made the connection from FCKeditor to Products.FCKeditor? The latter seems to be a product of the plone org while the repo link to github.com/treadmillian/fckeditor that you present does not seem to relate to plone so far as I can tell. Am I missing something?

[taladrane]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[taladrane]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.