Duplicate Advisory: jQuery Cross Site Scripting vulnerability

🗓️ 26 Jun 2023 21:30:58Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 369 Views

Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0 allows remote code execution via `<options>` element

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Ant affect IBM Operations Analytics - Log Analysis (CVE-2020-11023, CVE-2020-23064, CVE-2020-11022)	6 Sep 202408:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Moment, Jackson-mapper-asl and Red Hat JBoss Enterprise Application Platform might affect IBM Storage Defender Copy Data Management.	16 May 202519:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker sending invalid emails. (CVE-2023-27043).	23 Nov 202321:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2019-11358)	20 Jun 202408:46	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in jquery may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker obtaining sensitive information. (CVE-2020-23064)	1 Nov 202322:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Containerized Identity Manager	3 Feb 202522:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	2 Aug 202515:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale are now fixed.	9 Dec 202418:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Ant and Apache Derby affect IBM Operations Analytics - Log Analysis (CVE-2019-11358, CVE-2020-23064, CVE-2020-11023, CVE-2020-11022)	21 Aug 202511:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing (PUB) jQuery Vulnerability	15 Feb 202408:18	–	ibm

Vulners

Node

org.webjars.npm jqueryRange1.0.3–3.5.0maven

jquery jqueryRange1.0.3–3.5.0npm

rubyonrails jquery-railsRange<4.4.0rubygems

jquery jqueryRange1.0.3–3.5.0nuget

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-23064
snyk	www.snyk.io/vuln/SNYK-JS-JQUERY-565129
github	www.github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
github	www.github.com/rails/jquery-rails/blob/master/CHANGELOG.md
github	www.github.com/rails/jquery-rails/blob/master/CHANGELOG.md
github	www.github.com/rails/jquery-rails/blob/v4.3.5/vendor/assets/javascripts/jquery3.js
github	www.github.com/rails/jquery-rails/blob/v4.4.0/vendor/assets/javascripts/jquery3.js
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-23064.yml
blog	www.blog.jquery.com/2020/04/10/jquery-3-5-0-released
security	www.security.netapp.com/advisory/ntap-20230725-0003

15 May 2024 20:10Current

6.5Medium risk

Vulners AI Score6.5

CWE-79