In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade python3-custodia | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade cactiUpgrade drupal7 | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-client | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade jackson-jaxrs-providersUpgrade bea-stax-apiUpgrade jackson-module-jaxb-annotationsUpgrade python-nss-docUpgrade softhsm-develUpgrade softhsm-debuginfoUpgrade apache-commons-langUpgrade ipa-selinuxUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade pki-symkey-debuginfoUpgrade python3-yubicoUpgrade slapi-nisUpgrade slapi-nis-debugsourceUpgrade ipa-server-dnsUpgrade ipa-debugsourceUpgrade velocityUpgrade pki-toolsUpgrade glassfish-jaxb-apiUpgrade python-nss-debugsourceUpgrade slf4jUpgrade javassistUpgrade jackson-annotationsUpgrade resteasyUpgrade python3-custodiaUpgrade pki-kraUpgrade pki-servlet-engineUpgrade slf4j-jdk14Upgrade ipa-commonUpgrade jss-debuginfoUpgrade python3-ipaserverUpgrade python3-nssUpgrade ipa-client-epnUpgrade opendnssec-debuginfoUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-healthcheckUpgrade python2-ipalibUpgrade bind-dyndb-ldap-debugsourceUpgrade xml-commons-apisUpgrade python3-qrcodeUpgrade python2-ipaclientUpgrade ipa-client-sambaUpgrade stax-exUpgrade apache-commons-netUpgrade python3-jwcryptoUpgrade pki-caUpgrade ipa-python-compatUpgrade opendnssecUpgrade ldapjdkUpgrade glassfish-fastinfosetUpgrade slapi-nis-debuginfoUpgrade python3-nss-debuginfoUpgrade pki-core-debuginfoUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade relaxngDatatypeUpgrade python3-pkiUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade python3-ipaclientUpgrade python3-kdcproxyUpgrade softhsm-debugsourceUpgrade softhsmUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-client-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade jss-javadocUpgrade jssUpgrade ipa-debuginfoUpgrade opendnssec-debugsourceUpgrade pki-serverUpgrade pki-base-javaUpgrade jackson-jaxrs-json-providerUpgrade ipa-server-debuginfoUpgrade glassfish-jaxb-coreUpgrade bind-dyndb-ldapUpgrade jackson-coreUpgrade glassfish-jaxb-txw2Upgrade xsomUpgrade xalan-j2Upgrade python3-qrcode-coreUpgrade pki-core-debugsourceUpgrade custodiaUpgrade xmlstreambufferUpgrade python3-pyusbUpgrade python2-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade xerces-j2Upgrade ipa-server-commonUpgrade jackson-databindUpgrade tomcatjssUpgrade ipa-client-commonUpgrade xml-commons-resolverUpgrade javassist-javadocUpgrade jss-debugsourceUpgrade apache-commons-collectionsUpgrade pki-symkey | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade node-jqueryUpgrade otrs2 | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti-spine.Upgrade net-analyzer/cacti. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 32300397 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32247800 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 32253037 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 32052261 for version 12.1.3.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade javassistUpgrade xmlstreambufferUpgrade custodiaUpgrade ipa-python-compatUpgrade jackson-module-jaxb-annotationsUpgrade pki-serverUpgrade python3-pyusbUpgrade jackson-annotationsUpgrade pki-base-javaUpgrade ipa-clientUpgrade slf4jUpgrade opendnssecUpgrade python3-ipaclientUpgrade softhsmUpgrade glassfish-jaxb-txw2Upgrade ipa-serverUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade python2-ipalibUpgrade apache-commons-netUpgrade jakarta-commons-httpclientUpgrade relaxngDatatypeUpgrade xsomUpgrade softhsm-develUpgrade xerces-j2Upgrade ldapjdk-javadocUpgrade pki-toolsUpgrade glassfish-jaxb-coreUpgrade ipa-commonUpgrade ldapjdkUpgrade jackson-jaxrs-json-providerUpgrade tomcatjssUpgrade bind-dyndb-ldapUpgrade python3-ipaserverUpgrade xml-commons-resolverUpgrade python3-custodiaUpgrade jackson-databindUpgrade xalan-j2Upgrade glassfish-fastinfosetUpgrade apache-commons-langUpgrade python3-yubicoUpgrade pki-servlet-engineUpgrade python3-qrcode-coreUpgrade xml-commons-apisUpgrade ipa-client-commonUpgrade python3-pkiUpgrade glassfish-jaxb-apiUpgrade ipa-client-sambaUpgrade javassist-javadocUpgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade resteasyUpgrade python2-ipaserverUpgrade jquery-uiUpgrade ipa-client-epnUpgrade glassfish-jaxb-runtimeUpgrade python3-nssUpgrade pki-kraUpgrade jackson-jaxrs-providersUpgrade ipa-healthcheckUpgrade velocityUpgrade python-nss-docUpgrade pki-caUpgrade bea-stax-apiUpgrade slapi-nisUpgrade python3-ipalibUpgrade pki-baseUpgrade python3-kdcproxyUpgrade pki-symkeyUpgrade python2-ipaclientUpgrade stax-exUpgrade ipa-server-trust-adUpgrade jssUpgrade apache-commons-collectionsUpgrade python3-qrcodeUpgrade ipa-selinuxUpgrade ipa-server-dnsUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade ipa-healthcheck-core | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade glassfish-jaxb-coreUpgrade pki-servlet-engineUpgrade ipa-client-epnUpgrade python3-kdcproxyUpgrade velocityUpgrade python-nss-debugsourceUpgrade python3-ipaclientUpgrade xsomUpgrade slf4jUpgrade python3-nss-debuginfoUpgrade python3-qrcode-coreUpgrade opendnssecUpgrade ipa-client-commonUpgrade javassist-javadocUpgrade softhsm-develUpgrade bind-dyndb-ldapUpgrade ipa-server-dnsNo solution existsUpgrade ipa-debuginfoUpgrade slapi-nis-debugsourceUpgrade jssUpgrade jss-debuginfoUpgrade stax-exUpgrade pki-toolsUpgrade python3-qrcodeUpgrade pki-base-javaUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade javassistUpgrade ipa-debugsourceUpgrade python3-nssUpgrade python2-ipalibUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade glassfish-jaxb-apiUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade xalan-j2Upgrade pki-symkeyUpgrade python3-pyusbUpgrade softhsmUpgrade glassfish-fastinfosetUpgrade python-nss-docUpgrade ipa-client-debuginfoUpgrade jss-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-server-commonUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade ipa-commonUpgrade python3-ipaserverUpgrade xmlstreambufferUpgrade pki-caUpgrade jackson-coreUpgrade slapi-nisUpgrade ipa-selinuxUpgrade pki-servlet-4.0-apiUpgrade jackson-jaxrs-json-providerUpgrade python3-ipalibUpgrade jss-javadocUpgrade xerces-j2Upgrade opendnssec-debuginfoUpgrade resteasyUpgrade pki-core-debugsourceUpgrade python2-ipaclientUpgrade apache-commons-netUpgrade jackson-annotationsUpgrade ipa-clientUpgrade pki-tools-debuginfoUpgrade xml-commons-apisUpgrade glassfish-jaxb-runtimeUpgrade python2-ipaserverUpgrade custodiaUpgrade softhsm-debuginfoUpgrade python3-jwcryptoUpgrade pki-serverUpgrade pki-kraUpgrade pki-core-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nis-debuginfoUpgrade slf4j-jdk14Upgrade relaxngDatatypeUpgrade jackson-module-jaxb-annotationsUpgrade ipa-serverUpgrade glassfish-jaxb-txw2Upgrade bind-dyndb-ldap-debugsourceUpgrade jackson-jaxrs-providersUpgrade python3-pkiUpgrade bea-stax-apiUpgrade ipa-client-sambaUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-adUpgrade jackson-databindUpgrade tomcatjssUpgrade ldapjdkUpgrade python3-yubicoUpgrade ipa-server-debuginfoUpgrade apache-commons-langUpgrade xml-commons-resolverUpgrade pki-base | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrsUpgrade otrs-docUpgrade cacti-spineUpgrade cactiUpgrade otrs-itsm | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro)Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub