CVE-2020-11023

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-11023
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11023.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-11023
Aliases
Downstream
Related
Published
2020-04-29T21:15:11.743Z
Modified
2026-03-15T22:34:02.611933Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

References

Affected packages

Git / github.com/drupal/drupal

Affected ranges

Type
GIT
Repo
https://github.com/drupal/drupal
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d62812dc17ce593beb2ccd4cdbee1a76c95e3fd7
Introduced
497914920385b7016ac9c9367e0198530787adf2
Fixed
c62d5ba13e02923cf4f6e2a7ede0d2afcaa68043
Introduced
17ba30046ed57677de4feff8d07354890b40efdb
Fixed
ee0693f6d6bdc5cd772e163e6ed410567d82d33f
Introduced
f2b59e3ae8097ea01d15c708f1267b73794399c0
Fixed
ed3ab8ae68db8942877b5d6d8f3f91f090cd63fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0d600fe2ce507f28e91acc51d7f63be28521536
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb83de52e58e8fb3303de7aa9834f99ae128564a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ffaabfece5d21e41c1ae53c8e3a8f6ffa94582a
Introduced
d6c7b4cf627ab409c595e1c76bf0a8deadbc7feb
Last affected
49f719f7c4f7c1b69dc35ff8fbdea123e7d88f92
Introduced
d50941ce25ee8c7586bd98ccbf8892190a8d3052
Last affected
91f5bce36fdc607cbbb912fb133f52f32aa2d3cb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
497914920385b7016ac9c9367e0198530787adf2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0d600fe2ce507f28e91acc51d7f63be28521536
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb83de52e58e8fb3303de7aa9834f99ae128564a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ffaabfece5d21e41c1ae53c8e3a8f6ffa94582a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0d600fe2ce507f28e91acc51d7f63be28521536
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb83de52e58e8fb3303de7aa9834f99ae128564a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ffaabfece5d21e41c1ae53c8e3a8f6ffa94582a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f25feddd5ca56e6155e26e52667ab4fef87bb19d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
943ecef3c0bc9822338252a7df6419aeb9253c9d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9798f28fe983bea94fb06ff52423355688066780
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        },
        {
            "introduced": "7.0"
        },
        {
            "fixed": "7.70"
        },
        {
            "introduced": "8.7.0"
        },
        {
            "fixed": "8.7.14"
        },
        {
            "introduced": "8.8.0"
        },
        {
            "fixed": "8.8.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "6.1"
        },
        {
            "last_affected": "6.4"
        },
        {
            "introduced": "4.1"
        },
        {
            "last_affected": "4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.1"
        }
    ]
}
Type
GIT
Repo
https://github.com/jquery/jquery
Events
Introduced
4e3da33c59fafe34e237585743e86e24ba81046e
Fixed
7a0a850f3d41c0412609c1d32b1e602d4afe2f4e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7fc909edda2d8cf63d0eaffe9bd12f33e492ad3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f71eeda0fac4ec1442e631e90ff0703a0fb4ac96
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
32b00373b3f42e5cdcb709df53f3b08b7184a944
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7fc909edda2d8cf63d0eaffe9bd12f33e492ad3
Database specific 
{
    "versions": [
        {
            "introduced": "1.0.3"
        },
        {
            "fixed": "3.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.4.0"
        }
    ]
}

Affected versions

6.*
6.1
6.2
6.3
6.4
7.*
7.0
7.1
7.10
7.11
7.12
7.13
7.14
7.15
7.16
7.17
7.18
7.19
7.2
7.20
7.21
7.22
7.23
7.24
7.25
7.26
7.27
7.28
7.29
7.3
7.30
7.31
7.32
7.33
7.34
7.35
7.36
7.37
7.38
7.39
7.4
7.40
7.41
7.42
7.43
7.44
7.5
7.50
7.51
7.52
7.53
7.54
7.55
7.56
7.57
7.58
7.59
7.6
7.60
7.61
7.62
7.63
7.64
7.65
7.66
7.67
7.68
7.69
7.7
7.8
7.9
8.*
8.0-alpha10
8.0-alpha11
8.0-alpha12
8.0-alpha13
8.0-alpha2
8.0-alpha3
8.0-alpha4
8.0-alpha5
8.0-alpha6
8.0-alpha7
8.0-alpha8
8.0-alpha9
8.0.0
8.0.0-alpha14
8.0.0-alpha15
8.0.0-beta1
8.0.0-beta10
8.0.0-beta11
8.0.0-beta12
8.0.0-beta13
8.0.0-beta14
8.0.0-beta15
8.0.0-beta16
8.0.0-beta2
8.0.0-beta3
8.0.0-beta4
8.0.0-beta5
8.0.0-beta6
8.0.0-beta7
8.0.0-beta9
8.0.0-rc1
8.0.0-rc2
8.0.0-rc3
8.0.0-rc4
8.1.0
8.1.0-beta1
8.1.0-beta2
8.1.0-rc1
8.1.1
8.2.0
8.2.0-beta1
8.2.0-beta2
8.2.0-beta3
8.2.0-rc1
8.2.0-rc2
8.7.0
8.7.0-alpha1
8.7.0-alpha2
8.7.0-beta1
8.7.0-beta2
8.7.0-rc1
8.7.1
8.7.10
8.7.11
8.7.12
8.7.13
8.7.2
8.7.3
8.7.4
8.7.5
8.7.6
8.7.7
8.7.8
8.7.9
8.8.0
8.8.0-alpha1
8.8.0-beta1
8.8.0-rc1
8.8.1
8.8.2
8.8.3
8.8.4
8.8.5
9.*
9.0.0
9.0.0-alpha1
9.0.0-alpha2
9.0.0-beta1
9.0.0-beta2
9.0.0-beta3
9.0.0-rc1

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "32"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "33"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "20.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.3.0.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "2.7.0"
            },
            {
                "last_affected": "2.8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "2.4.0"
            },
            {
                "last_affected": "2.10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "21.1.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.1.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "5.9.0.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "16.1.0"
            },
            {
                "last_affected": "16.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.3.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.1.2.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "9.2.5.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "9.2.5.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2.12.41"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "16.2"
            },
            {
                "last_affected": "16.2.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "17.12.0"
            },
            {
                "last_affected": "17.12.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "18.8.0"
            },
            {
                "last_affected": "18.8.9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "19.12.0"
            },
            {
                "last_affected": "19.12.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.2.0.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.0.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.0.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18c"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19c"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.3.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.3.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.1.1.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "3.0"
            },
            {
                "last_affected": "3.1.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "6.0.9"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11023.json"