Lucene search

Cross-site Scripting (XSS)

🗓️ 27 Oct 2021 06:09:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 372 Views

jquery-ui XSS vulnerability in _updateAlternate functio

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 105
OSV	CVE-2021-41182	26 Oct 202115:15	–	osv
OSV	BIT-DRUPAL-2021-41182 XSS in the `altField` option of the Datepicker widget	6 Mar 202410:54	–	osv
OSV	UBUNTU-CVE-2021-41182	26 Oct 202115:15	–	osv
OSV	GHSA-9GJ3-HWP5-PMWC XSS in the `altField` option of the Datepicker widget in jquery-ui	26 Oct 202114:55	–	osv
OSV	DLA-3230-1 jqueryui - security update	7 Dec 202200:00	–	osv
OSV	DLA-2889-1 drupal7 - security update	19 Jan 202200:00	–	osv
OSV	USN-6419-1 jqueryui vulnerabilities	5 Oct 202312:36	–	osv
OSV	RHSA-2022:4711 Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update	16 Sep 202406:52	–	osv
OSV	SUSE-SU-2022:1729-1 Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud	18 May 202214:55	–	osv
OSV	DLA-3551-1 otrs2 - security update	31 Aug 202300:00	–	osv

Vulners

Node

drupal7 drupal7Match7.52-2+deb9u11debian

AND

debian debian_linuxMatch9

drupal7 drupal7Match7.78-r0js

AND

drupal7 drupal7Match7.82-r0js

AND

drupal7 drupal7Match7.81-r0js

AND

drupal7 drupal7Match7.69-r1js

AND

drupal7 drupal7Match7.70-r0js

AND

alpinelinux alpine_linuxMatchedge

drupal7 drupal7Match7.82-r0js

AND

alpinelinux alpine_linuxMatch3.15

otrs2 otrs2Match6.0.30-2debian

AND

debian debian_linuxMatch999

jquery-ui jquery-uiRange1.10.4–1.12.1js

jquery-ui jquery-uiRange1.8.2–1.12.1js

webjars jquery-uiRange1.10.3–1.12.1js

jquery-ui jquery-uiRange1.8.23–1.12.1js

webjars jquery-uiRange1.10.4–1.12.1js

Source	Link
github	www.github.com/jquery/jquery-ui/pull/1954/commits/6809ce843e5ac4128108ea4c15cbc100653c2b63
blog	www.blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00014.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
github	www.github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
lists	www.lists.debian.org/debian-lts-announce/2023/08/msg00040.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2021 06:12Current

2.4Low risk

Vulners AI Score2.4

CVSS24.3

CVSS36.1 - 6.5

EPSS0.23693