GHSA-wcm2-9c89-wmfm
Cross-site Scripting in jquery-ui
At a glance
- Published
- Updated
- CVE
- CVE-2010-5312
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Affected packages
| Package | Versions |
|---|---|
| npm · jquery-ui | introduced 1.7.0, fixed 1.10.0 |
| Maven · org.webjars.npm:jquery-ui | introduced 1.7.0, fixed 1.10.0 |
| NuGet · jQuery.UI.Combined | introduced 1.7.0, fixed 1.10.0 |
| RubyGems · jquery-ui-rails | introduced 0, fixed 4.0.0 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2010-5312 ADVISORY
- https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3 WEB
- https://www.drupal.org/sa-core-2022-002 WEB
- https://web.archive.org/web/20170316161850/http://www.securitytracker.com/id/1037035 WEB
- https://web.archive.org/web/20150316023043/http://www.securityfocus.com/bid/71106 WEB
- https://security.netapp.com/advisory/ntap-20190416-0007 WEB
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4 WEB
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3 WEB
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4 WEB
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3 WEB
- https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html WEB
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E WEB
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E WEB
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E WEB
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E WEB
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E WEB
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E WEB
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-ui-rails/CVE-2010-5312.yml WEB
- https://github.com/jquery/jquery-ui PACKAGE
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98696 WEB
- http://bugs.jqueryui.com/ticket/6016 WEB
- http://rhn.redhat.com/errata/RHSA-2015-0442.html WEB
- http://rhn.redhat.com/errata/RHSA-2015-1462.html WEB
- http://seclists.org/oss-sec/2014/q4/613 WEB
- http://seclists.org/oss-sec/2014/q4/616 WEB
- http://www.debian.org/security/2015/dsa-3249 WEB
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |