CVE-2018-1325

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-1325

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1325.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-1325

Aliases

GHSA-pjv3-rh6v-2pj8

Published

2018-04-18T19:29:00.893Z

Modified

2026-07-08T14:14:26.985503Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

References

https://markmail.org/message/6bxjyaolehhq7jrl

Affected packages

Git / github.com/sebfz1/wicket-jquery-ui

Affected ranges

Type

GIT

Repo

https://github.com/sebfz1/wicket-jquery-ui

Events

Introduced

dcb51ab95a979c336ce9db02c6df499fe8fb1b4f

Last affected

1a76d882ef644b18848909f2a78e1ef9469ddf14

Introduced

c6b20d7709583198d213611ff41e3a8b0c23c023

Last affected

7aa7fc435145bc14a6714ddd53a4b63c78c9eeb1

Introduced

be7daa360d40c5f32f78a36ef056ab28e953d4d6

Last affected

4f0a6dec989fd2827862ff260085af2b25c054ca

Database specific

{
    "cpe": [
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone3:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone4:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone5:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone6:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1.1:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone2:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone3:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4.1:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone5:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone6:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone7:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8.1:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone9:*:*:*:*:*:*",
        "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone9.1:*:*:*:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.29.0"
        },
        {
            "introduced": "7.0.1"
        },
        {
            "last_affected": "7.10.1"
        },
        {
            "introduced": "7.0.0-NA"
        },
        {
            "last_affected": "7.0.0-NA"
        },
        {
            "introduced": "7.0.0-milestone3"
        },
        {
            "last_affected": "7.0.0-milestone3"
        },
        {
            "introduced": "7.0.0-milestone4"
        },
        {
            "last_affected": "7.0.0-milestone4"
        },
        {
            "introduced": "7.0.0-milestone5"
        },
        {
            "last_affected": "7.0.0-milestone5"
        },
        {
            "introduced": "7.0.0-milestone6"
        },
        {
            "last_affected": "7.0.0-milestone6"
        },
        {
            "introduced": "8.0.0-NA"
        },
        {
            "last_affected": "8.0.0-NA"
        },
        {
            "introduced": "8.0.0-milestone1"
        },
        {
            "last_affected": "8.0.0-milestone1"
        },
        {
            "introduced": "8.0.0-milestone1\\.1"
        },
        {
            "last_affected": "8.0.0-milestone1\\.1"
        },
        {
            "introduced": "8.0.0-milestone2"
        },
        {
            "last_affected": "8.0.0-milestone2"
        },
        {
            "introduced": "8.0.0-milestone3"
        },
        {
            "last_affected": "8.0.0-milestone3"
        },
        {
            "introduced": "8.0.0-milestone4"
        },
        {
            "last_affected": "8.0.0-milestone4"
        },
        {
            "introduced": "8.0.0-milestone4\\.1"
        },
        {
            "last_affected": "8.0.0-milestone4\\.1"
        },
        {
            "introduced": "8.0.0-milestone5"
        },
        {
            "last_affected": "8.0.0-milestone5"
        },
        {
            "introduced": "8.0.0-milestone6"
        },
        {
            "last_affected": "8.0.0-milestone6"
        },
        {
            "introduced": "8.0.0-milestone7"
        },
        {
            "last_affected": "8.0.0-milestone7"
        },
        {
            "introduced": "8.0.0-milestone8"
        },
        {
            "last_affected": "8.0.0-milestone8"
        },
        {
            "introduced": "8.0.0-milestone8\\.1"
        },
        {
            "last_affected": "8.0.0-milestone8\\.1"
        },
        {
            "introduced": "8.0.0-milestone9"
        },
        {
            "last_affected": "8.0.0-milestone9"
        },
        {
            "introduced": "8.0.0-milestone9\\.1"
        },
        {
            "last_affected": "8.0.0-milestone9\\.1"
        }
    ]
}

Affected versions

7.*

7.0.0-NA

7.0.0-milestone3

7.0.0-milestone4

7.0.0-milestone5

7.0.0-milestone6

8.*

8.0.0-NA

8.0.0-milestone1

8.0.0-milestone1\.1

8.0.0-milestone2

8.0.0-milestone3

8.0.0-milestone4

8.0.0-milestone4\.1

8.0.0-milestone5

8.0.0-milestone6

8.0.0-milestone7

8.0.0-milestone8

8.0.0-milestone8\.1

8.0.0-milestone9

8.0.0-milestone9\.1

wicket-jquery-ui-7.*

wicket-jquery-ui-7.0.1

wicket-jquery-ui-7.0.2

wicket-jquery-ui-7.1.0

wicket-jquery-ui-7.10.0

wicket-jquery-ui-7.10.1

wicket-jquery-ui-7.2.0

wicket-jquery-ui-7.2.1

wicket-jquery-ui-7.3.0

wicket-jquery-ui-7.3.1

wicket-jquery-ui-7.4.0

wicket-jquery-ui-7.5.0

wicket-jquery-ui-7.6.0

wicket-jquery-ui-7.7.0

wicket-jquery-ui-7.8.0

wicket-jquery-ui-7.9.0

wicket-jquery-ui-7.9.2

wicket-jquery-ui-8.*

wicket-jquery-ui-8.0.0-M1

wicket-jquery-ui-8.0.0-M1.1

wicket-jquery-ui-8.0.0-M2

wicket-jquery-ui-8.0.0-M3

wicket-jquery-ui-8.0.0-M4

wicket-jquery-ui-8.0.0-M4.1

wicket-jquery-ui-8.0.0-M5

wicket-jquery-ui-8.0.0-M6

wicket-jquery-ui-8.0.0-M7

wicket-jquery-ui-8.0.0-M8

wicket-jquery-ui-8.0.0-M8.1

wicket-jquery-ui-8.0.0-M9

wicket-jquery-ui-8.0.0-M9.1

wicket-jquery-ui-parent-7.*

wicket-jquery-ui-parent-7.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1325.json"