Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-11023HistoryApr 29, 2020 - 9:15 p.m.
CVE-2020-11023
2020-04-2921:15:11
Debian Security Bug Tracker
security-tracker.debian.org
43
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
0.019 Low
EPSS
Percentile
88.6%
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery’s DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | jquery | < 3.3.1~dfsg-3+deb10u1 | jquery_3.3.1~dfsg-3+deb10u1_all.deb |
| Debian | 12 | all | node-jquery | < 3.5.0+dfsg-2 | node-jquery_3.5.0+dfsg-2_all.deb |
| Debian | 11 | all | node-jquery | < 3.5.0+dfsg-2 | node-jquery_3.5.0+dfsg-2_all.deb |
| Debian | 10 | all | node-jquery | <= 2.2.4+dfsg-4 | node-jquery_2.2.4+dfsg-4_all.deb |
| Debian | 999 | all | node-jquery | < 3.5.0+dfsg-2 | node-jquery_3.5.0+dfsg-2_all.deb |
| Debian | 13 | all | node-jquery | < 3.5.0+dfsg-2 | node-jquery_3.5.0+dfsg-2_all.deb |
| Debian | 11 | all | otrs2 | < 6.0.30-1 | otrs2_6.0.30-1_all.deb |
| Debian | 10 | all | otrs2 | < 6.0.16-2+deb10u1 | otrs2_6.0.16-2+deb10u1_all.deb |
Related
prion
prion
Code injection
2020-04-29 21:15:00
redhat
redhat
(RHSA-2021:1846) Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
(RHSA-2021:0860) Moderate: ipa security and bug fix update
2021-03-16 10:27:14
(RHSA-2020:5412) Moderate: python-XStatic-jQuery224 security update
2020-12-15 17:29:55
nessus
nessus
Amazon Linux 2 : ipa (ALAS-2021-1626)
2021-04-22 00:00:00
RHEL 8 : python-XStatic-jQuery224 (RHSA-2020:5412)
2020-12-18 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : ipa Vulnerability (NS-SA-2022-0037)
2022-05-10 00:00:00
openvas
openvas
jQuery 1.0.3 < 3.5.0 XSS Vulnerability
2020-05-05 00:00:00
openSUSE: Security Advisory for otrs (openSUSE-SU-2020:1888-1)
2020-11-10 00:00:00
Debian: Security Advisory (DLA-2608-1)
2021-03-26 00:00:00
osv
osv
Potential XSS vulnerability in jQuery
2020-04-29 22:19:14
CVE-2020-11023
2020-04-29 21:15:11
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
nvd
nvd
CVE-2020-11023
2020-04-29 21:15:11
CVE-2020-23064
2023-06-26 19:15:09
ubuntucve
ubuntucve
CVE-2020-11023
2020-04-29 00:00:00
CVE-2020-23064
2023-06-26 00:00:00
almalinux
almalinux
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
Low: pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
cvelist
cvelist
CVE-2020-11023 Potential XSS vulnerability in jQuery
2020-04-29 00:00:00
ics
ics
Sensormatic Electronics VideoEdge
2021-11-02 12:00:00
github
github
Potential XSS vulnerability in jQuery
2020-04-29 22:19:14
Persistent Cross-site Scripting vulnerability in PrivateBin
2022-04-12 20:45:22
packetstorm
packetstorm
jQuery 1.0.3 Cross Site Scripting
2021-04-14 00:00:00
amazon
amazon
Medium: ipa
2021-04-20 17:55:00
zdt
zdt
jQuery 1.0.3 - Cross-Site Scripting Vulnerability
2021-04-14 00:00:00
cve
cve
CVE-2020-11023
2020-04-29 21:15:11
CVE-2020-23064
2023-06-26 19:15:09
oraclelinux
oraclelinux
bootstrap security update
2021-08-09 00:00:00
ipa security and bug fix update
2021-03-19 00:00:00
idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-25 00:00:00
redhatcve
redhatcve
CVE-2020-11023
2021-06-20 07:11:02
alpinelinux
alpinelinux
CVE-2020-11023
2020-04-29 21:15:11
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in jQuery (CVE-2020-11023)
2023-01-12 21:59:00
f5
f5
K66544153 : jQuery vulnerability CVE-2020-11023
2020-08-03 00:00:00
rocky
rocky
idm:DL1 and idm:client security, bug fix, and enhancement update
2021-05-18 06:14:07
pcs security, bug fix, and enhancement update
2021-11-09 08:21:49
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-30 02:21:22
exploitdb
exploitdb
jQuery 1.0.3 - Cross-Site Scripting (XSS)
2021-04-14 00:00:00
hp
hp
HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
Certain HP Printers and MFP products - Cross-Site Scripting (XSS)
2020-09-17 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: drupal8-8.9.0-1.fc32
2020-06-16 01:32:24
[SECURITY] Fedora 33 Update: drupal7-7.72-1.fc33
2020-09-25 17:15:48
[SECURITY] Fedora 32 Update: cacti-1.2.13-1.fc32
2020-07-23 01:06:59
atlassian
atlassian
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
Update jQuery to avoid CVE-2020-11022 and CVE-2020-11023
2021-02-02 09:59:24
jquery 2.2.4 XSS vulnerability
2022-08-24 14:53:45
debiancve
debiancve
CVE-2020-23064
2023-06-26 19:15:09
attackerkb
attackerkb
CVE-2020-11023
2020-04-29 00:00:00
CVE-2020-11022
2020-04-29 00:00:00
joomla
joomla
[20200604] - Core - XSS in jQuery.htmlPrefilter
2020-04-10 00:00:00
suse
suse
Security update for otrs (moderate)
2020-11-10 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-25 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-28 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Jquery
2021-10-16 01:10:33
Exploit for Cross-site Scripting in Jquery
2020-04-14 19:12:01
checkpoint_advisories
checkpoint_advisories
jQuery Cross Site Scripting (CVE-2020-11022; CVE-2020-11023)
2020-11-16 00:00:00
debian
debian
[SECURITY] [DSA 4693-1] drupal7 security update
2020-05-26 21:08:21
[SECURITY] [DLA 2608-1] jquery security update
2021-03-26 01:32:42
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002
2020-05-20 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2020-07-26 00:00:00
typo3
typo3
Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)
2020-07-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
freebsd
freebsd
Cacti -- multiple vulnerabilities
2020-07-15 00:00:00
adobe
adobe
APSB19-38 Security update available for Adobe Experience Manager
2019-07-09 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
0.019 Low
EPSS
Percentile
88.6%
Related for DEBIANCVE:CVE-2020-11023