In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade custodiaUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade python3-pyusb | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade cactiUpgrade drupal7 | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade ipa-clientUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-debuginfoUpgrade ipa-commonUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-client-common | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade python3-ipalibUpgrade python3-pkiUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-healthcheck-coreUpgrade python3-kdcproxyUpgrade jackson-databindUpgrade pki-symkeyUpgrade slapi-nis-debuginfoUpgrade ipa-python-compatUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade python3-pyusbUpgrade tomcatjssUpgrade ipa-client-commonUpgrade opendnssecUpgrade apache-commons-netUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade python3-ipaclientUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsmUpgrade xmlstreambufferUpgrade xsomUpgrade softhsm-debugsourceUpgrade ldapjdkUpgrade opendnssec-debugsourceUpgrade jackson-coreUpgrade bind-dyndb-ldapUpgrade ipa-server-debuginfoUpgrade pki-base-javaUpgrade ipa-debuginfoUpgrade pki-serverUpgrade jssUpgrade pki-baseUpgrade javassist-javadocUpgrade jss-debugsourceUpgrade pki-caUpgrade jss-javadocUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-txw2Upgrade python3-qrcode-coreUpgrade glassfish-fastinfosetUpgrade python3-jwcryptoUpgrade xalan-j2Upgrade ipa-server-trust-adUpgrade custodiaUpgrade apache-commons-collectionsUpgrade python3-nss-debuginfoUpgrade xerces-j2Upgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-json-providerUpgrade pki-core-debugsourceUpgrade xml-commons-resolverUpgrade ipa-client-debuginfoUpgrade pki-symkey-debuginfoUpgrade jakarta-commons-httpclientUpgrade ipa-selinuxUpgrade python3-nssUpgrade ipa-healthcheckUpgrade ipa-debugsourceUpgrade python-nss-docUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade xml-commons-apisUpgrade stax-exUpgrade opendnssec-debuginfoUpgrade python-nss-debugsourceUpgrade softhsm-develUpgrade slf4jUpgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade ipa-server-dnsUpgrade velocityUpgrade slf4j-jdk14Upgrade slapi-nis-debugsourceUpgrade python3-custodiaUpgrade slapi-nisUpgrade resteasyUpgrade python3-yubicoUpgrade ldapjdk-javadocUpgrade javassistUpgrade ipa-clientUpgrade pki-kraUpgrade bea-stax-apiUpgrade apache-commons-langUpgrade ipa-serverUpgrade jackson-module-jaxb-annotationsUpgrade softhsm-debuginfoUpgrade pki-toolsUpgrade python3-ipaserverUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade ipa-commonUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade bind-dyndb-ldap-debugsource | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade otrs2Upgrade node-jquery | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 7.70Upgrade to drupal version 8.7.1Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade cactiUpgrade gitlab-ce | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti.Upgrade net-analyzer/cacti-spine. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade relaxngDatatypeUpgrade xalan-j2Upgrade python2-ipalibUpgrade xsomUpgrade jackson-databindUpgrade apache-commons-langUpgrade pki-servlet-engineUpgrade python3-jwcryptoUpgrade javassistUpgrade jackson-module-jaxb-annotationsUpgrade ipa-clientUpgrade apache-commons-netUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-txw2Upgrade ipa-client-commonUpgrade jakarta-commons-httpclientUpgrade xmlstreambufferUpgrade pki-toolsUpgrade ipa-server-commonUpgrade glassfish-jaxb-coreUpgrade python3-ipaserverUpgrade ipa-commonUpgrade jackson-jaxrs-json-providerUpgrade slf4jUpgrade ldapjdkUpgrade ldapjdk-javadocUpgrade softhsm-develUpgrade jackson-annotationsUpgrade ipa-serverUpgrade tomcatjssUpgrade pki-base-javaUpgrade python3-pyusbUpgrade opendnssecUpgrade pki-serverUpgrade softhsmUpgrade custodiaUpgrade ipa-python-compatUpgrade pki-servlet-4.0-apiUpgrade python3-ipaclientUpgrade glassfish-jaxb-apiUpgrade ipa-client-sambaUpgrade javassist-javadocUpgrade resteasyUpgrade python3-pkiUpgrade jss-javadocUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade xerces-j2Upgrade xml-commons-apisUpgrade xml-commons-resolverUpgrade bind-dyndb-ldapUpgrade python3-custodiaUpgrade python3-nssUpgrade jackson-coreUpgrade python-nss-docUpgrade pki-caUpgrade ipa-server-dnsUpgrade pki-kraUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade glassfish-jaxb-runtimeUpgrade ipa-healthcheck-coreUpgrade slf4j-jdk14Upgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade stax-exUpgrade python2-ipaclientUpgrade pki-symkeyUpgrade jquery-uiUpgrade jssUpgrade slapi-nisUpgrade python3-qrcodeUpgrade ipa-healthcheckUpgrade jackson-jaxrs-providersUpgrade pki-baseUpgrade bea-stax-apiUpgrade velocityUpgrade python2-ipaserverUpgrade apache-commons-collectionsUpgrade python3-ipalib | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade ipa-server-debuginfoUpgrade python3-yubicoUpgrade pki-servlet-4.0-apiUpgrade jackson-coreUpgrade ipa-serverUpgrade ipa-commonUpgrade slapi-nisUpgrade ipa-clientUpgrade relaxngDatatypeUpgrade slapi-nis-debuginfoUpgrade tomcatjssUpgrade python3-ipalibUpgrade jackson-jaxrs-json-providerUpgrade pki-tools-debuginfoUpgrade custodiaUpgrade ipa-healthcheckUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade xml-commons-resolverUpgrade opendnssec-debuginfoUpgrade apache-commons-langUpgrade ipa-server-trust-adUpgrade pki-baseUpgrade ldapjdkUpgrade jackson-databindUpgrade pki-core-debugsourceUpgrade jackson-jaxrs-providersUpgrade pki-serverUpgrade apache-commons-netUpgrade jackson-annotationsUpgrade jss-javadocUpgrade bea-stax-apiUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pkiUpgrade ipa-client-sambaUpgrade xmlstreambufferUpgrade python2-ipaserverUpgrade glassfish-jaxb-runtimeUpgrade pki-caUpgrade xerces-j2Upgrade python2-ipaclientUpgrade pki-core-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade slf4j-jdk14Upgrade glassfish-jaxb-txw2Upgrade pki-kraUpgrade python3-jwcryptoUpgrade xml-commons-apisUpgrade ipa-selinuxUpgrade resteasyUpgrade softhsm-debuginfoUpgrade python3-ipaserverUpgrade stax-exUpgrade slf4jUpgrade bind-dyndb-ldapUpgrade python3-nssUpgrade ipa-debuginfoUpgrade python3-qrcode-coreUpgrade apache-commons-collectionsNo solution existsUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade xalan-j2Upgrade ipa-server-dnsUpgrade ipa-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade opendnssecUpgrade jss-debugsourceUpgrade velocityUpgrade python3-ipaclientUpgrade jakarta-commons-httpclientUpgrade python-nss-debugsourceUpgrade jss-debuginfoUpgrade ipa-python-compatUpgrade softhsm-develUpgrade javassist-javadocUpgrade pki-symkeyUpgrade xsomUpgrade python2-ipalibUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade glassfish-jaxb-coreUpgrade jssUpgrade pki-servlet-engineUpgrade ipa-client-debuginfoUpgrade ldapjdk-javadocUpgrade ipa-server-commonUpgrade pki-base-javaUpgrade softhsm-debugsourceUpgrade ipa-healthcheck-coreUpgrade glassfish-jaxb-apiUpgrade glassfish-fastinfosetUpgrade python3-qrcodeUpgrade softhsmUpgrade javassistUpgrade python3-custodiaUpgrade python3-pyusbUpgrade slapi-nis-debugsource | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python3-nssUpgrade python-nss-doc | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade cactiUpgrade otrs-itsmUpgrade cacti-spineUpgrade otrsUpgrade otrs-doc | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade drupal7 (Ubuntu Pro)Upgrade libjs-jqueryUpgrade libjs-jquery (Ubuntu Pro) | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub