VDB
BDU%3A2021-02617
BDU%3A2021-02617
PUBLISHED
CVSS 5.5 MEDIUM
Уязвимость библиотеки jQuery UI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить межсайтовую сценарную атаку
Risk Scores
CVSS 2.0
5.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Fedora Project, The jQuery Foundation, Hitachi, Ltd. | WebLogic Server, Primavera Unifier, Business Intelligence Enterprise Edition, Fedora, Siebel UI Framework, jQuery UI, Oracle Hospitality Cruise Fleet Management, Hitachi MSM |
Timeline
- May 24, 2021 CVE Published
- Aug 31, 2022 CVE Updated
References
- https://www.oracle.com/security-alerts/cpuapr2021.html url
- https://www.oracle.com/security-alerts/cpuapr2019.html url
- https://www.oracle.com/security-alerts/cpujul2019.html url
- https://www.oracle.com/security-alerts/cpuoct2019.html url
- https://github.com/jquery/api.jqueryui.com/issues/281 url
- https://github.com/jquery/jquery-ui/commit/9644e7bae9116edaf8d37c5b38cb32b892f10ff6 url
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-03 url
- https://www.oracle.com/security-alerts/cpuapr2020.html advisory
- https://www.oracle.com/security-alerts/cpujul2018.html advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E2I4UHPIW26FIALH7GGZ3IYUUA53VOOJ/ advisory