CVE-2009-4875: Frederico Caldeira Knabben Fckeditor.java

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

FCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed request parameter that contains "ctrl" characters.

Affected products

• Frederico Caldeira Knabben Fckeditor.java: version 2.4 only

Published 2010-05-26. Last modified 2026-06-16.