In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-yubicoUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade python3-jwcrypto | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade drupal7Upgrade cacti | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipalibUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-client | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade bind-dyndb-ldapUpgrade softhsm-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-healthcheck-coreUpgrade python3-pkiUpgrade python3-ipalibUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade jssUpgrade jss-debugsourceUpgrade jss-javadocUpgrade glassfish-jaxb-txw2Upgrade ipa-debuginfoUpgrade pki-tools-debuginfoUpgrade custodiaUpgrade pki-baseUpgrade xml-commons-resolverUpgrade pki-servlet-4.0-apiUpgrade softhsmUpgrade xerces-j2Upgrade xsomUpgrade opendnssecUpgrade tomcatjssUpgrade xmlstreambufferUpgrade glassfish-jaxb-coreUpgrade pki-serverUpgrade pki-base-javaUpgrade opendnssec-debugsourceUpgrade javassist-javadocUpgrade jackson-coreUpgrade slapi-nis-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade python3-nss-debuginfoUpgrade ipa-server-debuginfoUpgrade glassfish-fastinfosetUpgrade jackson-databindUpgrade apache-commons-netUpgrade ldapjdkUpgrade python3-pyusbUpgrade pki-caUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade glassfish-jaxb-runtimeUpgrade ipa-python-compatUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade xalan-j2Upgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade pki-symkeyUpgrade python2-ipaserverUpgrade pki-core-debugsourceUpgrade python3-ipaclientUpgrade apache-commons-collectionsUpgrade ipa-client-debuginfoUpgrade python3-ipaserverUpgrade jakarta-commons-httpclientUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade slf4jUpgrade python-nss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-docUpgrade ipa-serverUpgrade ipa-clientUpgrade bea-stax-apiUpgrade apache-commons-langUpgrade pki-servlet-engineUpgrade ipa-client-epnUpgrade ipa-commonUpgrade ipa-client-sambaUpgrade python3-nssUpgrade xml-commons-apisUpgrade python3-qrcodeUpgrade python2-ipaclientUpgrade stax-exUpgrade slapi-nis-debugsourceUpgrade python2-ipalibUpgrade python3-custodiaUpgrade pki-kraUpgrade velocityUpgrade slf4j-jdk14Upgrade slapi-nisUpgrade softhsm-develUpgrade bind-dyndb-ldap-debugsourceUpgrade jackson-jaxrs-providersUpgrade javassistUpgrade ipa-healthcheckUpgrade ipa-server-dnsUpgrade ipa-selinuxUpgrade jss-debuginfoUpgrade pki-symkey-debuginfoUpgrade python3-yubicoUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade resteasyUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-debugsource | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade otrs2Upgrade node-jquery | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti-spine.Upgrade net-analyzer/cacti. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade tomcatjssUpgrade python3-ipaclientUpgrade opendnssecUpgrade pki-serverUpgrade ipa-python-compatUpgrade custodiaUpgrade jackson-module-jaxb-annotationsUpgrade slf4jUpgrade xmlstreambufferUpgrade jackson-jaxrs-json-providerUpgrade ipa-serverUpgrade jackson-annotationsUpgrade ipa-clientUpgrade softhsmUpgrade apache-commons-langUpgrade pki-base-javaUpgrade javassistUpgrade pki-toolsUpgrade relaxngDatatypeUpgrade ipa-client-sambaUpgrade glassfish-jaxb-txw2Upgrade softhsm-develUpgrade apache-commons-netUpgrade jackson-databindUpgrade jakarta-commons-httpclientUpgrade xsomUpgrade python3-ipaserverUpgrade glassfish-fastinfosetUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade python2-ipalibUpgrade xalan-j2Upgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade resteasyUpgrade python3-pyusbUpgrade xml-commons-resolverUpgrade ipa-commonUpgrade glassfish-jaxb-apiUpgrade python3-qrcode-coreUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade ipa-client-commonUpgrade javassist-javadocUpgrade ipa-server-commonUpgrade xerces-j2Upgrade xml-commons-apisUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade ldapjdkUpgrade python3-pkiUpgrade pki-symkeyUpgrade pki-kraUpgrade ipa-healthcheckUpgrade ipa-healthcheck-coreUpgrade glassfish-jaxb-runtimeUpgrade ipa-client-epnUpgrade apache-commons-collectionsUpgrade jquery-uiUpgrade stax-exUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade python3-kdcproxyUpgrade ipa-server-trust-adUpgrade velocityUpgrade jssUpgrade slapi-nisUpgrade pki-baseUpgrade bea-stax-apiUpgrade jackson-jaxrs-providersUpgrade ipa-server-dnsUpgrade python3-nssUpgrade python3-qrcodeUpgrade python-nss-docUpgrade python2-ipaserverUpgrade pki-caUpgrade python3-ipalibUpgrade jackson-coreUpgrade slf4j-jdk14 | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade python3-pkiUpgrade ipa-server-debuginfoUpgrade ipa-client-sambaUpgrade glassfish-jaxb-runtimeUpgrade ipa-serverUpgrade bea-stax-apiUpgrade apache-commons-langUpgrade bind-dyndb-ldap-debuginfoUpgrade pki-kraUpgrade xmlstreambufferUpgrade python3-yubicoUpgrade jackson-jaxrs-json-providerUpgrade pki-caUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade jss-javadocUpgrade python3-ipalibUpgrade ldapjdkUpgrade ipa-healthcheckUpgrade opendnssec-debuginfoUpgrade xml-commons-resolverUpgrade pki-baseUpgrade jackson-databindUpgrade python3-ipaserverUpgrade glassfish-jaxb-txw2Upgrade resteasyUpgrade jackson-jaxrs-providersUpgrade ipa-commonUpgrade slapi-nis-debuginfoUpgrade xerces-j2Upgrade slf4j-jdk14Upgrade custodiaUpgrade pki-core-debugsourceUpgrade python2-ipaclientUpgrade tomcatjssUpgrade xml-commons-apisUpgrade pki-servlet-4.0-apiUpgrade apache-commons-netUpgrade jackson-module-jaxb-annotationsUpgrade ipa-selinuxUpgrade jackson-coreUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-jwcryptoUpgrade softhsm-debuginfoUpgrade jackson-annotationsUpgrade ipa-clientUpgrade pki-tools-debuginfoUpgrade pki-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldapUpgrade opendnssecUpgrade xalan-j2Upgrade jss-debuginfoNo solution existsUpgrade jssUpgrade python3-qrcode-coreUpgrade ipa-python-compatUpgrade pki-servlet-engineUpgrade glassfish-jaxb-apiUpgrade ipa-client-debuginfoUpgrade jss-debugsourceUpgrade softhsm-debugsourceUpgrade velocityUpgrade ipa-debugsourceUpgrade python3-nssUpgrade python3-custodiaUpgrade python2-ipalibUpgrade pki-symkeyUpgrade pki-base-javaUpgrade jakarta-commons-httpclientUpgrade softhsmUpgrade ldapjdk-javadocUpgrade python3-qrcodeUpgrade glassfish-jaxb-coreUpgrade ipa-client-epnUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade ipa-server-commonUpgrade ipa-healthcheck-coreUpgrade javassistUpgrade ipa-debuginfoUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade javassist-javadocUpgrade ipa-server-dnsUpgrade stax-exUpgrade ipa-client-commonUpgrade opendnssec-debugsourceUpgrade xsomUpgrade apache-commons-collectionsUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade python3-ipaclientUpgrade softhsm-develUpgrade slapi-nis-debugsource | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python3-nssUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade cactiUpgrade otrs-itsmUpgrade cacti-spineUpgrade otrsUpgrade otrs-doc | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jqueryUpgrade libjs-jquery (Ubuntu Pro) | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub