GHSA-wcm2-9c89-wmfm

Source

https://github.com/advisories/GHSA-wcm2-9c89-wmfm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2017/10/GHSA-wcm2-9c89-wmfm/GHSA-wcm2-9c89-wmfm.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-wcm2-9c89-wmfm

Aliases

CVE-2010-5312

Published

2017-10-24T18:33:38Z

Modified

2024-03-12T05:19:19.988782Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Cross-site Scripting in jquery-ui

Details

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Database specific

{
    "nvd_published_at": "2014-11-24T16:59:00Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2020-06-16T22:00:08Z"
}

References

Affected packages

npm / jquery-ui

Package

Name: jquery-ui; View open source insights on deps.dev
Purl: pkg:npm/jquery-ui

Affected ranges

Type: SEMVER
Events: Introduced

1.7.0

Fixed

1.10.0

Maven / org.webjars.npm:jquery-ui

Package

Name: org.webjars.npm:jquery-ui; View open source insights on deps.dev
Purl: pkg:maven/org.webjars.npm/jquery-ui

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.7.0

Fixed

1.10.0

NuGet / jQuery.UI.Combined

Package

Name: jQuery.UI.Combined; View open source insights on deps.dev
Purl: pkg:nuget/jQuery.UI.Combined

Affected ranges

Type: ECOSYSTEM
Events: Introduced

1.7.0

Fixed

1.10.0

Affected versions

1.*

1.8.9

1.8.10

1.8.11

1.8.12

1.8.13

1.8.14

1.8.15

1.8.16

1.8.17

1.8.18

1.8.19

1.8.20

1.8.20.1

1.8.21

1.8.22

1.8.23

1.8.24

1.9.0-RC1

1.9.0

1.9.1

1.9.2

RubyGems / jquery-ui-rails

Package

Name: jquery-ui-rails
Purl: pkg:gem/jquery-ui-rails

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.0

Affected versions

0.*

0.0.1

0.0.2

0.1.0

0.2.0

0.2.1

0.2.2

0.3.0

0.4.0

0.4.1

0.5.0

1.*

1.0.0

1.1.0

1.1.1

2.*

2.0.0

2.0.1

2.0.2

3.*

3.0.0

3.0.1