CVE-2019-15891

—

CVSS 3.1

5.3 medium

EPSS

1%p63

Published

Sep 26, 2019 (Sep 26, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection.

Vendors: cksource
Products: ckfinder
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.