In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Details
- CVSS 3.1 Base Score: 6.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade custodiaUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-jwcryptoUpgrade python3-pyusbUpgrade python3-yubico | May 4, 2022 | Apr 29, 2020 |
| Alpine Linux | — | Upgrade cactiUpgrade drupal7 | Aug 22, 2024 | Apr 29, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade ipa-client | Oct 28, 2020 | Apr 29, 2020 |
| Centos_linux | — | Upgrade glassfish-fastinfosetUpgrade python3-nss-debuginfoUpgrade ldapjdkUpgrade python3-ipaclientUpgrade pki-caUpgrade python3-jwcryptoUpgrade xerces-j2Upgrade apache-commons-collectionsUpgrade tomcatjssUpgrade custodiaUpgrade opendnssecUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade slapi-nis-debuginfoUpgrade jackson-coreUpgrade ipa-debuginfoUpgrade jssUpgrade glassfish-jaxb-txw2Upgrade jss-debugsourceUpgrade pki-tools-debuginfoUpgrade jss-javadocUpgrade ipa-server-debuginfoUpgrade glassfish-jaxb-coreUpgrade pki-baseUpgrade xml-commons-resolverUpgrade opendnssec-debugsourceUpgrade pki-base-javaUpgrade javassist-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pkiUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-kdcproxyUpgrade ipa-server-commonUpgrade bind-dyndb-ldapUpgrade jackson-jaxrs-json-providerUpgrade python3-ipalibUpgrade glassfish-jaxb-runtimeUpgrade ipa-client-commonUpgrade jackson-databindUpgrade apache-commons-netUpgrade python2-ipaserverUpgrade relaxngDatatypeUpgrade pki-symkeyUpgrade softhsm-debugsourceUpgrade pki-core-debuginfoUpgrade ipa-client-debuginfoUpgrade xsomUpgrade xalan-j2Upgrade pki-serverUpgrade ipa-server-trust-adUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade softhsmUpgrade pki-core-debugsourceUpgrade python3-qrcode-coreUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debugsourceUpgrade python-nss-debugsourceUpgrade jakarta-commons-httpclientUpgrade softhsm-develUpgrade slf4jUpgrade ipa-clientUpgrade python-nss-docUpgrade bea-stax-apiUpgrade apache-commons-langUpgrade pki-toolsUpgrade velocityUpgrade python3-custodiaUpgrade pki-servlet-engineUpgrade ipa-commonUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade python3-nssUpgrade python3-ipaserverUpgrade ipa-debugsourceUpgrade xml-commons-apisUpgrade stax-exUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-serverUpgrade jackson-module-jaxb-annotationsUpgrade slf4j-jdk14Upgrade pki-kraUpgrade opendnssec-debuginfoUpgrade jss-debuginfoUpgrade ipa-healthcheckUpgrade jackson-jaxrs-providersUpgrade softhsm-debuginfoUpgrade slapi-nisUpgrade python3-yubicoUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade javassistUpgrade ipa-server-dnsUpgrade ipa-selinuxUpgrade resteasyUpgrade glassfish-jaxb-api | Oct 1, 2020 | Apr 29, 2020 |
| Debian | — | Upgrade node-jqueryUpgrade otrs2 | May 28, 2020 | Apr 29, 2020 |
| Drupal | — | Upgrade to drupal version 8.7.1Upgrade to drupal version 7.70Upgrade to drupal version 8.8.6 | Jun 3, 2020 | Apr 29, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 3, 2020 |
| Freebsd | — | Upgrade gitlab-ceUpgrade cacti | Sep 2, 2020 | Sep 2, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/cacti.Upgrade net-analyzer/cacti-spine. | Jul 28, 2020 | Apr 29, 2020 |
| Jquery | — | Upgrade jQuery to version 3.5.0 | Jun 3, 2020 | Apr 29, 2020 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Apr 29, 2020 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33416881 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33172858 for version 10.3.6.0.0.Apply the Patch Set Update (PSU) 33172866 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 33416868 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33412599 for version 12.2.1.3.0. | Oct 22, 2020 | Apr 29, 2020 |
| Oracle_linux | — | Upgrade pki-caUpgrade python-nss-docUpgrade python3-kdcproxyUpgrade jssUpgrade ipa-server-dnsUpgrade jackson-jaxrs-providersUpgrade python2-ipaserverUpgrade pki-kraUpgrade ipa-healthcheckUpgrade python3-nssUpgrade pki-symkeyUpgrade python2-ipaclientUpgrade stax-exUpgrade ipa-selinuxUpgrade jquery-uiUpgrade slf4j-jdk14Upgrade ipa-server-trust-adUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-collectionsUpgrade ipa-client-epnUpgrade pki-baseUpgrade python3-ipalibUpgrade ipa-healthcheck-coreUpgrade jackson-coreUpgrade velocityUpgrade bea-stax-apiUpgrade slapi-nisUpgrade python3-qrcodeUpgrade opendnssecUpgrade jackson-module-jaxb-annotationsUpgrade python3-qrcode-coreUpgrade relaxngDatatypeUpgrade python2-ipalibUpgrade pki-serverUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade python3-ipaclientUpgrade custodiaUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-clientUpgrade slf4jUpgrade pki-base-javaUpgrade jackson-annotationsUpgrade ipa-server-commonUpgrade apache-commons-langUpgrade tomcatjssUpgrade softhsmUpgrade resteasyUpgrade jss-javadocUpgrade javassist-javadocUpgrade ipa-client-sambaUpgrade glassfish-jaxb-apiUpgrade pki-servlet-4.0-apiUpgrade glassfish-fastinfosetUpgrade softhsm-develUpgrade pki-servlet-engineUpgrade ldapjdk-javadocUpgrade ipa-commonUpgrade jakarta-commons-httpclientUpgrade apache-commons-netUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade ldapjdkUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-txw2Upgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade python3-yubicoUpgrade xml-commons-apisUpgrade python3-pkiUpgrade jackson-databindUpgrade javassistUpgrade xmlstreambufferUpgrade pki-toolsUpgrade xalan-j2Upgrade xsomUpgrade jackson-jaxrs-json-provider | Oct 7, 2020 | Apr 23, 2020 |
| Progress Moveit Gateway | — | Upgrade Progress MOVEit Gateway to the latest version | Dec 13, 2024 | Jun 9, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Apr 23, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 29, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshift-web-console | Dec 29, 2020 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade python3-yubicoUpgrade slf4j-jdk14Upgrade resteasyUpgrade python2-ipaserverUpgrade jackson-annotationsUpgrade pki-kraUpgrade apache-commons-langUpgrade ipa-commonUpgrade pki-caUpgrade xml-commons-apisUpgrade jackson-coreUpgrade softhsm-debuginfoUpgrade python3-jwcryptoUpgrade xmlstreambufferUpgrade ipa-clientUpgrade jackson-databindUpgrade tomcatjssUpgrade ipa-selinuxUpgrade python3-ipaserverUpgrade ldapjdkUpgrade ipa-server-debuginfoUpgrade ipa-healthcheckUpgrade custodiaUpgrade pki-baseUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-runtimeUpgrade python3-ipalibUpgrade xml-commons-resolverUpgrade pki-core-debugsourceUpgrade jss-javadocUpgrade pki-servlet-4.0-apiUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-serverUpgrade python3-pkiUpgrade bea-stax-apiUpgrade relaxngDatatypeUpgrade jackson-jaxrs-json-providerUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade jackson-jaxrs-providersUpgrade ipa-client-sambaUpgrade slapi-nis-debuginfoUpgrade pki-tools-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade xerces-j2Upgrade python2-ipaclientUpgrade glassfish-jaxb-txw2Upgrade ipa-server-trust-ad-debuginfoUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade pki-core-debuginfoUpgrade apache-commons-netUpgrade pki-base-javaUpgrade jss-debuginfoUpgrade ldapjdk-javadocUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade slf4jUpgrade softhsm-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-server-commonUpgrade glassfish-fastinfosetUpgrade python3-nssUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-custodiaUpgrade ipa-debuginfoUpgrade opendnssec-debugsourceUpgrade python3-pyusbUpgrade apache-commons-collectionsUpgrade ipa-client-commonUpgrade python3-nss-debuginfoUpgrade xalan-j2Upgrade stax-exUpgrade pki-symkeyUpgrade pki-symkey-debuginfoUpgrade opendnssecUpgrade python2-ipalibUpgrade javassistUpgrade python3-qrcodeUpgrade jssUpgrade python3-qrcode-coreUpgrade slapi-nis-debugsourceNo solution existsUpgrade ipa-python-compatUpgrade bind-dyndb-ldapUpgrade pki-toolsUpgrade softhsm-develUpgrade ipa-debugsourceUpgrade jakarta-commons-httpclientUpgrade ipa-client-debuginfoUpgrade jss-debugsourceUpgrade pki-servlet-engineUpgrade ipa-server-dnsUpgrade glassfish-jaxb-coreUpgrade python3-kdcproxyUpgrade xsomUpgrade javassist-javadocUpgrade softhsm | Oct 1, 2020 | Apr 29, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 29, 2020 |
| Suse | — | Upgrade otrs-itsmUpgrade cactiUpgrade otrs-docUpgrade cacti-spineUpgrade otrs | Jul 27, 2020 | Apr 29, 2020 |
| Ubuntu | — | Upgrade libjs-jqueryUpgrade drupal7 (Ubuntu Pro)Upgrade libjs-jquery (Ubuntu Pro) | Jan 31, 2025 | Apr 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub