VDB
BIT-drupal-2020-11022
BIT-drupal-2020-11022
PUBLISHED
CVSS 6.099999904632568 MEDIUM
jQuery has a potential XSS vulnerability
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | drupal | 7.0.0, 8.7.0, 8.8.0 |
Timeline
- Mar 6, 2024 CVE Published
- Apr 17, 2026 CVE Updated
- May 9, 2026 Distribution Patch
References
- https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3Cissues.flink.apache.org%3E url
- https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html url
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc url
- https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E url
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html url
- http://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html url
- https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3Cissues.flink.apache.org%3E url
- https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3Cissues.flink.apache.org%3E url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4/ url
- https://github.com/jquery/jquery/releases/tag/3.5.0 url
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11022.yml url
- https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY url
- https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html url
- https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2 url
- https://www.oracle.com/security-alerts/cpuapr2022.html url
- https://www.tenable.com/security/tns-2021-10 url
- https://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html url
…and 52 more