Lucene search

K
rubygemsRubySecRUBY:JQUERY-RAILS-2011-4969
HistoryAug 31, 2011 - 8:00 p.m.

jQuery vulnerable to Cross-Site Scripting (XSS)

2011-08-3120:00:00
RubySec
blog.jquery.com
9

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3,
when using location.hash to select elements, allows remote attackers
to inject arbitrary web script or HTML via a crafted tag.

Affected configurations

Vulners
Node
rubyjquery-railsRange1.6.3
VendorProductVersionCPE
rubyjquery-rails*cpe:2.3:a:ruby:jquery-rails:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N