https-nj.gov---CVE-2020-11023

https-nj.gov---CVE-2020-11023 Vulnearability Report of the New Jersey official site Potential XSS vulnerability when appending HTML containing option elements. Passing HTML containing elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods i.e...

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 Vulnearability Report of the New Jersey official site Potential XSS vulnerability in jQuery.htmlPrefilter and related methods. Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others...

CVE-2020-11022-CVE-2020-11023

CVE-2020-11022 CVE-2020-11023 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuer...

CVE-2020-11022

So here's the thing So here's the thing guys, CVE-2020-11022 is a vulnerability in jQuery versions below 3.5.0 or above, CVE-2020-11022 itself triggers an XSS by leveraging DOM Manipulation e.g., .html, .append, and others to execute malicious XSS code. 1. Verify jQuery Version: Make sure the...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-14-gcc / gcc-toolset-14-gcc-c++ / etc (crlsa-2025_1338)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251338 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9 [CIQ] Security Update: gcc-toolset-13-gcc / gcc-toolset-13-gcc-c++ / etc (crlsa-2025_1309)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251309 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9 [CIQ] Security Update: cpp / cpp-debuginfo / gcc / gcc-c++ / gcc-c++-debuginfo / etc (crlsa-2025_1346)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251346 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9 [CIQ] Security Update: gcc-toolset-14-gcc / gcc-toolset-14-gcc-c++ / etc (crlsa-2025_1300)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251300 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

CentOS Linux 7 [TuxCare] Security Update: gcc / gcc-gnat / libgfortran / libgnat-devel / libitm-devel / etc (CENTOS7:CLSA-2025:1744892170)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1744892170 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

CentOS Linux 8 [TuxCare] Security Update: gcc-c++ / gcc-offload-nvptx / gcc-plugin-devel / libgfortran / etc (CENTOS-STREAM8:CLSA-2025:1744875112)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1744875112 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even afte...

AlmaLinux 9.2 [TuxCare] Security Update: python3-tbb / tbb / tbb-devel / tbb-doc (ALMALINUX9.2:CLSA-2026:1779120195)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779120195 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

Rocky Linux 8 [CIQ] Security Update: doxygen / doxygen-debuginfo / doxygen-debugsource / etc (crlsa-2025_1314)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251314 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9 [CIQ] Security Update: doxygen / doxygen-debuginfo / doxygen-debugsource / etc (crlsa-2025_1329)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251329 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-13-gcc / gcc-toolset-13-gcc-c++ / etc (crlsa-2025_1306)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251306 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 8 [CIQ] Security Update: python3-tbb / python3-tbb-debuginfo / tbb / tbb-debuginfo / etc (crlsa-2025_1215)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251215 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

CentOS Linux 8.4 [TuxCare] Security Update: libatomic / libatomic-static / libgomp / liblsan / liblsan-static / etc (CENTOS8.4:CLSA-2025:1744925221)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1744925221 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

CentOS Linux 8.5 [TuxCare] Security Update: gcc-gdb-plugin / gcc-gfortran / gcc-offload-nvptx / libgcc / etc (CENTOS8.5:CLSA-2025:1744925460)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1744925460 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

Rocky Linux 8 [CIQ] Security Update: cpp / cpp-debuginfo / gcc / gcc-c++ / gcc-c++-debuginfo / etc (crlsa-2025_1301)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251301 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9 [CIQ] Security Update: python3-tbb / python3-tbb-debuginfo / tbb / tbb-debuginfo / etc (crlsa-2025_1210)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251210 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9.2 [TuxCare] Security Update: cpp / cross-gcc-aarch64 / cross-gcc-c++-aarch64 / gcc / gcc-c++ / etc (ALMALINUX9.2:CLSA-2025:1741290577)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741290577 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...