CVE-2020-11023
JQuery Cross-Site Scripting (XSS) Vulnerability
Jquery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
29. Apr 2020
Original bei Debian öffnenAusgewertete Quellen
- Debianhttps://lists.debian.org/debian-lts-announce/2021/03/msg00033.html
- Debianhttps://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
- Debianhttps://www.debian.org/security/2020/dsa-4693
- Herstellerhttps://blog.jquery.com/2020/04/10/jquery-3-5-0-released
- Herstellerhttps://jquery.com/upgrade-guide/3.5/
- Hinweishttp://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html
- Hinweishttp://packetstormsecurity.com/files/162160/jQuery-1.0.3-Cross-Site-Scripting.html
- Hinweishttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY/
- Hinweishttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K/
- Hinweishttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4/
- Hinweishttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B/
- Hinweishttps://security.gentoo.org/glsa/202007-03
- Hinweishttps://security.netapp.com/advisory/ntap-20200511-0006/
- Hinweishttps://www.drupal.org/sa-core-2020-002
- Hinweishttps://www.oracle.com//security-alerts/cpujul2021.html
- Hinweishttps://www.oracle.com/security-alerts/cpuApr2021.html
- Hinweishttps://www.oracle.com/security-alerts/cpuapr2022.html
- Hinweishttps://www.oracle.com/security-alerts/cpujan2021.html
- Hinweishttps://www.oracle.com/security-alerts/cpujan2022.html
- Hinweishttps://www.oracle.com/security-alerts/cpujul2020.html
- Hinweishttps://www.oracle.com/security-alerts/cpujul2022.html
- Hinweishttps://www.oracle.com/security-alerts/cpuoct2020.html
- Hinweishttps://www.oracle.com/security-alerts/cpuoct2021.html
- Hinweishttps://www.tenable.com/security/tns-2021-02
- Hinweishttps://www.tenable.com/security/tns-2021-10
- CISAhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-11023
- CISAJQuery Cross-Site Scripting (XSS) Vulnerability
- NVDCVE-2020-11023
- GitHubhttps://github.com/github/advisory-database/blob/99afa6fdeaf5d1d23e1021ff915a5e5dbc82c1f1/advisories/github-reviewed/2020/04/GHSA-jpcq-cgw6-v4j6/GHSA-jpcq-cgw6-v4j6.json#L20-L37
- GitHubhttps://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6