Hello,
We are happy to announce the release of Magnolia CMS 6.2.42-sp1. As we have confirmed, Magnolia protects CKEditor instances from all the discovered vulnerabilities already by default; this patch release is the only measure recommended at this time.
There is a link to the release’s known issues below, where you will find information about the patch. Many thanks to everyone who reported, helped fix, or simply commented on these issues.
Release notes
https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.42/Magnolia-6.2.42-known-issues.html#_security_vulnerability_in_ckeditor_4_22_1
Upgrade information
https://docs.magnolia-cms.com/product-docs/Upgrading-to-Magnolia.html
Download