VDB
BDU%3A2023-07536
BDU%3A2023-07536
PUBLISHED
CVSS 6.400000095367432 MEDIUM
Уязвимость библиотеки jQuery, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить межсайтовую сценарную атаку
Risk Scores
CVSS 2.0
6.400000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., NetApp Inc., The jQuery Foundation, Oracle Corp., Juniper Networks Inc., Moxa Inc. | Red Hat Enterprise Linux, Snap Creator Framework, Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, Active IQ Unified Manager for Linux, jQuery, Oracle PeopleSoft Enterprise PeopleTools, NetApp Cloud Backup (formerly AltaVault), OnCommand System Manager, JunOS, OnCell 3120-LTE-1 |
Timeline
- Nov 9, 2023 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://security.netapp.com/advisory/ntap-20200528-0001/ url
- https://snyk.io/vuln/SNYK-JS-JQUERY-569619 url
- https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US url
- https://www.oracle.com/security-alerts/cpujul2022.html url
- https://vuldb.com/ru/?id.204478 url
- https://access.redhat.com/security/cve/cve-2020-7656 url
- https://security.snyk.io/vuln/SNYK-JS-JQUERY-569619 url
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-244707-oncell-3120-lte-1-series-multiple-jquery-vulnerabilities url
- https://github.com/jquery/jquery/blob/9e6393b0bcb52b15313f88141d0bd7dd54227426/src/ajax.js#L203 advisory