Security Research

CVE-2022-48110 CKEditor 5 XSS: Sanitizer Gaps in data: URL Schemes

Thinking 2022-12-10 2 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
data:URL scheme bypassing the model layer sanitizer to fire XSS

After CKEditor 5 switched to the model + view two-layer architecture, the XSS risk should have been eliminated — but the sanitizer still missed URL forms like the data: protocol header during model→view deserialization.

Unlock to view this content.