OESA-2023-1446

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1446

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2023-1446.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2023-1446

Upstream

CVE-2020-23064

Published

2023-07-29T11:05:34Z

Modified

2025-09-03T06:17:02.638391Z

Summary

doxygen security update

Details

Doxygen is the de facto standard tool for generating documentation from annotated C++ sources, but it also supports other popular programming languages such as C, Objective-C, C#, PHP, Java, Python, IDL (Corba, Microsoft, and UNO/OpenOffice flavors), Fortran, VHDL, Tcl, and to some extent D.

Security Fix(es):

Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.(CVE-2020-23064)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / doxygen

Package

Name: doxygen
Purl: pkg:rpm/openEuler/doxygen&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.17-8.oe1

Ecosystem specific

{
    "src": [
        "doxygen-1.8.17-8.oe1.src.rpm"
    ],
    "aarch64": [
        "doxygen-debugsource-1.8.17-8.oe1.aarch64.rpm",
        "doxygen-doxywizard-1.8.17-8.oe1.aarch64.rpm",
        "doxygen-debuginfo-1.8.17-8.oe1.aarch64.rpm",
        "doxygen-1.8.17-8.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "doxygen-doxywizard-1.8.17-8.oe1.x86_64.rpm",
        "doxygen-debugsource-1.8.17-8.oe1.x86_64.rpm",
        "doxygen-1.8.17-8.oe1.x86_64.rpm",
        "doxygen-debuginfo-1.8.17-8.oe1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2023-1446.json"