CVE-2018-1325

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2018-1325

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1325.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-1325

Aliases

GHSA-pjv3-rh6v-2pj8

Published

2018-04-18T19:29:00Z

Modified

2026-10-24T10:31:04Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

References

https://markmail.org/message/6bxjyaolehhq7jrl

Affected packages

Git / github.com/sebfz1/wicket-jquery-ui

Affected ranges

Type

GIT

Repo

https://github.com/sebfz1/wicket-jquery-ui

Events

Introduced

dcb51ab95a979c336ce9db02c6df499fe8fb1b4f

Last Affected

1a76d882ef644b18848909f2a78e1ef9469ddf14

Introduced

c6b20d7709583198d213611ff41e3a8b0c23c023

Last Affected

7aa7fc435145bc14a6714ddd53a4b63c78c9eeb1

Introduced

be7daa360d40c5f32f78a36ef056ab28e953d4d6

Last Affected

4f0a6dec989fd2827862ff260085af2b25c054ca

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.0.0"
                },
                {
                    "last_affected":  "6.29.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.1"
                },
                {
                    "last_affected":  "7.10.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0-NA"
                },
                {
                    "last_affected":  "7.0.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0-milestone3"
                },
                {
                    "last_affected":  "7.0.0-milestone3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0-milestone4"
                },
                {
                    "last_affected":  "7.0.0-milestone4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0-milestone5"
                },
                {
                    "last_affected":  "7.0.0-milestone5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0-milestone6"
                },
                {
                    "last_affected":  "7.0.0-milestone6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:-:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-NA"
                },
                {
                    "last_affected":  "8.0.0-NA"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone1"
                },
                {
                    "last_affected":  "8.0.0-milestone1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1.1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone1\\.1"
                },
                {
                    "last_affected":  "8.0.0-milestone1\\.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone2"
                },
                {
                    "last_affected":  "8.0.0-milestone2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone3"
                },
                {
                    "last_affected":  "8.0.0-milestone3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone4"
                },
                {
                    "last_affected":  "8.0.0-milestone4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4.1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone4\\.1"
                },
                {
                    "last_affected":  "8.0.0-milestone4\\.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone5:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone5"
                },
                {
                    "last_affected":  "8.0.0-milestone5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone6:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone6"
                },
                {
                    "last_affected":  "8.0.0-milestone6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone7:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone7"
                },
                {
                    "last_affected":  "8.0.0-milestone7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone8"
                },
                {
                    "last_affected":  "8.0.0-milestone8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8.1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone8\\.1"
                },
                {
                    "last_affected":  "8.0.0-milestone8\\.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone9:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone9"
                },
                {
                    "last_affected":  "8.0.0-milestone9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone9.1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "8.0.0-milestone9\\.1"
                },
                {
                    "last_affected":  "8.0.0-milestone9\\.1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

7.*

7.0.0-NA

7.0.0-milestone3

7.0.0-milestone4

7.0.0-milestone5

7.0.0-milestone6

8.*

8.0.0-NA

8.0.0-milestone1

8.0.0-milestone1\.1

8.0.0-milestone2

8.0.0-milestone3

8.0.0-milestone4

8.0.0-milestone4\.1

8.0.0-milestone5

8.0.0-milestone6

8.0.0-milestone7

8.0.0-milestone8

8.0.0-milestone8\.1

8.0.0-milestone9

8.0.0-milestone9\.1

wicket-jquery-ui-7.*

wicket-jquery-ui-7.0.1

wicket-jquery-ui-7.0.2

wicket-jquery-ui-7.1.0

wicket-jquery-ui-7.10.0

wicket-jquery-ui-7.10.1

wicket-jquery-ui-7.2.0

wicket-jquery-ui-7.2.1

wicket-jquery-ui-7.3.0

wicket-jquery-ui-7.3.1

wicket-jquery-ui-7.4.0

wicket-jquery-ui-7.5.0

wicket-jquery-ui-7.6.0

wicket-jquery-ui-7.7.0

wicket-jquery-ui-7.8.0

wicket-jquery-ui-7.9.0

wicket-jquery-ui-7.9.2

wicket-jquery-ui-8.*

wicket-jquery-ui-8.0.0-M1

wicket-jquery-ui-8.0.0-M1.1

wicket-jquery-ui-8.0.0-M2

wicket-jquery-ui-8.0.0-M3

wicket-jquery-ui-8.0.0-M4

wicket-jquery-ui-8.0.0-M4.1

wicket-jquery-ui-8.0.0-M5

wicket-jquery-ui-8.0.0-M6

wicket-jquery-ui-8.0.0-M7

wicket-jquery-ui-8.0.0-M8

wicket-jquery-ui-8.0.0-M8.1

wicket-jquery-ui-8.0.0-M9

wicket-jquery-ui-8.0.0-M9.1

wicket-jquery-ui-parent-7.*

wicket-jquery-ui-parent-7.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1325.json"