CVE-2020-7656

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-7656

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7656.json

Aliases

• GHSA-q4m3-2j7h-f7xw
• SNYK-JS-JQUERY-569619

Related

• ALSA-2021:4142
• RLSA-2021:4142

Published

2020-05-19T21:15:10Z

Modified

2023-11-08T04:04:03.117901Z

Details

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

References

• https://security.netapp.com/advisory/ntap-20200528-0001/
• https://snyk.io/vuln/SNYK-JS-JQUERY-569619
• https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US
• https://www.oracle.com/security-alerts/cpujul2022.html