Code injection

🗓️ 26 Oct 2021 15:15:00Reported by PRIOn knowledge baseType

Prior to version 1.13.0, jQuery-UI Datepicker widget may execute untrusted code from `altField` option. Fixed in jQuery UI 1.13.0

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance	11 Jan 202416:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jQuery affect IBM Tivoli Netcool Impact	1 Dec 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2021-41182, CVE-2022-31160, CVE-2021-41184, CVE-2021-41183	27 Mar 202317:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities identified in jQuery-UI affects IBM Engineering Lifecycle Optimization - Publishing	4 Oct 202308:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator was vulnerable to cross-site scripting due to multiple JQuery vulnerabilities (CVE-2021-41184, CVE-2021-41183, CVE-2021-41182)	2 Feb 202320:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager virtual appliance component	10 Jan 202404:21	–	ibm

Source	Link
github	www.github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
github	www.github.com/jquery/jquery-ui/pull/1954/commits/6809ce843e5ac4128108ea4c15cbc100653c2b63
blog	www.blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
security	www.security.netapp.com/advisory/ntap-20211118-0004/
drupal	www.drupal.org/sa-contrib-2022-004
drupal	www.drupal.org/sa-core-2022-002
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00014.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
tenable	www.tenable.com/security/tns-2022-09
oracle	www.oracle.com/security-alerts/cpujul2022.html

31 Aug 2023 03:15Current

6.1Medium risk

Vulners AI Score6.1

EPSS0.22267