jQuery vulnerability

2013-02-1300:00:00

ubuntu.com

8.2 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.6%

JSON

Releases

Ubuntu 11.10
Ubuntu 10.04

Packages

jquery - JavaScript library for dynamic web applications

Details

It was discovered that jQuery incorrectly handled selecting elements using
location.hash, resulting in a possible cross-site scripting (XSS) issue.
With cross-site scripting vulnerabilities, if a user were tricked into
viewing a specially crafted page, a remote attacker could exploit this to
modify the contents, or steal confidential data, within the same domain.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.10noarchlibjs-jquery< 1.6.2-1ubuntu2.2UNKNOWN
Ubuntu10.04noarchlibjs-jquery< 1.3.3-2ubuntu1.2UNKNOWN