VDB
BDU%3A2023-07871
BDU%3A2023-07871
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость метода .position() библиотеки jQuery UI, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Сообщество свободного программного обеспечения, Fedora Project, NetApp Inc., АО "НППКТ", The jQuery Foundation | WebLogic Server, Debian GNU/Linux, Primavera Unifier, Oracle Hospitality Materials Control, Banking Platform, Oracle Agile PLM, Oracle Communications Interactive Session Recorder, Fedora, Hospitality Suite8, Oracle Communications Operations Monitor, Oracle Hospitality Inventory Management, NetApp HCI Baseboard Management Controller H410C, NetApp HCI Baseboard Management Controller H300S, NetApp HCI Baseboard Management Controller H500S, NetApp HCI Baseboard Management Controller H700S, NetApp HCI Baseboard Management Controller H410S, JD Edwards EnterpriseOne Tools, MySQL Enterprise Monitor, Oracle Big Data Spatial and Graph, Database Server, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Oracle PeopleSoft Enterprise PeopleTools, NetApp Cloud Backup (formerly AltaVault), jQuery UI, REST Data Services, Oracle Policy Automation, Drupal, SnapCenter |
Timeline
- Nov 15, 2023 CVE Published
- Jan 11, 2024 CVE Updated
References
- https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/ url
- https://github.com/jquery/jquery-ui/commit/effa323f1505f2ce7a324e4f429fa9032c72f280 url
- https://github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327 url
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/ url
- https://security.netapp.com/advisory/ntap-20211118-0004/ url
- https://www.drupal.org/sa-core-2022-001 url
- https://www.oracle.com/security-alerts/cpuapr2022.html url
- https://www.oracle.com/security-alerts/cpujul2022.html url
- https://www.tenable.com/security/tns-2022-09 url
- https://security-tracker.debian.org/tracker/CVE-2021-41184 url
- https://api.jquery.com/position/ url
- https://vuldb.com/ru/?id.211678 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.7/ url
- https://www.oracle.com/security-alerts/cpuapr2022.html: advisory