jquery-ui Tooltip widget vulnerable to XSS

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-6662 · ADVISORY
• jquery/jquery · WEB
• jquery/jquery-ui commit 5fee6fd · WEB
• jquery/jquery-ui commit f285440 · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/98697 · WEB
• jquery/jquery · PACKAGE
• rubysec/ruby-advisory-db · WEB
• bugs.jqueryui.com/ticket/8859 · WEB
• bugs.jqueryui.com/ticket/8861 · WEB
• rhn.redhat.com/errata/RHSA-2015-0442.html · WEB
• rhn.redhat.com/errata/RHSA-2015-1462.html · WEB
• seclists.org/oss-sec/2014/q4/613 · WEB
• seclists.org/oss-sec/2014/q4/616 · WEB
• securityfocus.com/bid/71107

org.webjars.npm:jquery-ui のその他の脆弱性

• CVE-2022-31160中 6.1jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are…
• CVE-2021-41184中 6.1jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()…
• CVE-2021-41183中 6.1jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Date…
• CVE-2021-41182中 6.1jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepi…
• CVE-2016-7103中 6.1Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via …