Cross-site Scripting in jquery-ui

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2010-5312 · ADVISORY
• jquery/jquery-ui commit 7e9060c · WEB
• drupal.org/sa-core-2022-002 · WEB
• web.archive.org/web/20170316161850/http://www.securitytracker.com/id/1037035 · WEB
• web.archive.org/web/20150316023043/http://www.securityfocus.com/bid/71106 · WEB
• security.netapp.com/advisory/ntap-20190416-0007 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3 · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4

org.webjars.npm:jquery-ui のその他の脆弱性

• CVE-2022-31160中 6.1jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are…
• CVE-2021-41184中 6.1jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()…
• CVE-2021-41183中 6.1jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Date…
• CVE-2021-41182中 6.1jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepi…
• CVE-2016-7103中 6.1Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via …