XSS in the `altField` option of the Datepicker widget in jquery-ui

🗓️ 26 Oct 2021 14:55:02Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 468 Views

XSS vulnerability in jquery-ui Datepicker altField optio

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance	11 Jan 202416:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jQuery affect IBM Tivoli Netcool Impact	1 Dec 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2021-41182, CVE-2022-31160, CVE-2021-41184, CVE-2021-41183	27 Mar 202317:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities identified in jQuery-UI affects IBM Engineering Lifecycle Optimization - Publishing	4 Oct 202308:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator was vulnerable to cross-site scripting due to multiple JQuery vulnerabilities (CVE-2021-41184, CVE-2021-41183, CVE-2021-41182)	2 Feb 202320:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager virtual appliance component	10 Jan 202404:21	–	ibm

Vulners

Node

jquery-ui-railsRange<7.0.0rubygems

org.webjars.npm jquery-uiRange<1.13.0maven

jquery.ui.combinedRange<1.13.0nuget

jquery jquery-uiRange<1.13.0npm

Source	Link
github	www.github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41182
github	www.github.com/jquery/jquery-ui/pull/1954/commits/6809ce843e5ac4128108ea4c15cbc100653c2b63
blog	www.blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
security	www.security.netapp.com/advisory/ntap-20211118-0004/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00014.html
drupal	www.drupal.org/sa-contrib-2022-004

26 Sep 2023 21:52Current

2.1Low risk

Vulners AI Score2.1

CVSS 24.3

CVSS 3.16.1 - 6.5

EPSS0.22267

CWE-79