CVE-2021-41182

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-41182
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41182.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-41182
Aliases
Downstream
Related
Published
2021-10-26T15:15:10.313Z
Modified
2026-03-15T22:43:15.053569Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS selector. A workaround is to not accept the value of the altField option from untrusted sources.

References

Affected packages

Git / github.com/drupal/drupal

Affected ranges

Type
GIT
Repo
https://github.com/drupal/drupal
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d62812dc17ce593beb2ccd4cdbee1a76c95e3fd7
Introduced
497914920385b7016ac9c9367e0198530787adf2
Fixed
c991d5749144c851b71aa7be721715d7e346526f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
49f719f7c4f7c1b69dc35ff8fbdea123e7d88f92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
91f5bce36fdc607cbbb912fb133f52f32aa2d3cb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b03ec76684fced28a6cb2fa19165148053281a22
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
70213855c545b322e96703528532540cafba8da7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e205f31c36c6db950f50d473cfd24ad22ac98ae1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
49f719f7c4f7c1b69dc35ff8fbdea123e7d88f92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
91f5bce36fdc607cbbb912fb133f52f32aa2d3cb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b03ec76684fced28a6cb2fa19165148053281a22
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
70213855c545b322e96703528532540cafba8da7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5c6f14f762c9aef87cd2731818386f202ee8463c
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        },
        {
            "introduced": "7.0"
        },
        {
            "fixed": "7.86"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.1.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/jquery/jquery-ui
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6d072c596a81d99a77fc36c14caf3eb3a803689e
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.13.0"
        }
    ]
}

Affected versions

7.*
7.0
8.*
8.0-alpha10
8.0-alpha11
8.0-alpha12
8.0-alpha13
8.0-alpha2
8.0-alpha3
8.0-alpha4
8.0-alpha5
8.0-alpha6
8.0-alpha7
8.0-alpha8
8.0-alpha9
8.0.0
8.0.0-alpha14
8.0.0-alpha15
8.0.0-beta1
8.0.0-beta10
8.0.0-beta11
8.0.0-beta12
8.0.0-beta13
8.0.0-beta14
8.0.0-beta15
8.0.0-beta16
8.0.0-beta2
8.0.0-beta3
8.0.0-beta4
8.0.0-beta5
8.0.0-beta6
8.0.0-beta7
8.0.0-beta9
8.0.0-rc1
8.0.0-rc2
8.0.0-rc3
8.0.0-rc4
8.1.0-beta1
9.*
9.0.0
9.0.0-alpha1
9.0.0-alpha2
9.0.0-beta1
9.0.0-beta2
9.0.0-beta3
9.0.0-rc1
9.1.0
9.1.0-alpha1
9.1.0-beta1
9.1.0-rc1
9.1.0-rc2
9.1.0-rc3
9.3.0
9.3.0-alpha1
9.3.0-beta1
9.3.0-beta2
9.3.0-beta3
9.3.0-rc1
9.3.2
9.3.3
9.3.4
9.3.5
9.3.6

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "33"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "34"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "35"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "8.11.0"
            },
            {
                "last_affected": "8.14.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.10.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.29"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "17.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.1.1.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "5.21.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "22.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.12.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "23.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "23.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "8.11.0"
            },
            {
                "last_affected": "8.14.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.10.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.2.6.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.58"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.59"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.2.0"
            },
            {
                "last_affected": "12.2.25"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "17.7"
            },
            {
                "last_affected": "17.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "22.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "22.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.1.1.0.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41182.json"