VDB
RHBA-2025%3A1598
RHBA-2025%3A1598
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in jQuery. HTML containing \<option\> elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | quay/quay-rhel8@sha256:e0dd2dcd0b89ba9969136ae3ae5df87fe22e061031f1d1bd1b260782a7069ea7_s390x as a component of Quay v3 | *, quay/quay-rhel8@sha256:e0dd2dcd0b89ba9969136ae3ae5df87fe22e061031f1d1bd1b260782a7069ea7_s390x |
| Red Hat | quay/quay-builder-qemu-rhcos-rhel8@sha256:b91aec3d3f9cf8a4204e6e13e27035802693a8517b14e59db2535fe789e7a33e_ppc64le as a component of Quay v3 | quay/quay-builder-qemu-rhcos-rhel8@sha256:b91aec3d3f9cf8a4204e6e13e27035802693a8517b14e59db2535fe789e7a33e_ppc64le, * |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:fd0d3139530d2a99a3e053d07266d14dccd73ac18e7ef073619de415069520dd_ppc64le as a component of Quay v3 | *, quay/quay-bridge-operator-rhel8@sha256:fd0d3139530d2a99a3e053d07266d14dccd73ac18e7ef073619de415069520dd_ppc64le |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:bdda4ec419724ce68af416eaebb2b6e4be16ea2c33595be506cf2fd5beef4056_s390x as a component of Quay v3 | *, quay/quay-bridge-operator-rhel8@sha256:bdda4ec419724ce68af416eaebb2b6e4be16ea2c33595be506cf2fd5beef4056_s390x |
| Red Hat | quay/clair-rhel8@sha256:cdda23eec3cf0caf153089fb59be85ecaa50a3918ef78e0f11892045f9918ef3_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:c81af92a6092273dea45a9dee56bbb8a246b566402497b1746fa4817a3cece39_ppc64le as a component of Quay v3 | quay/quay-container-security-operator-bundle@sha256:c81af92a6092273dea45a9dee56bbb8a246b566402497b1746fa4817a3cece39_ppc64le, * |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:5a20c2d291a56f0d660071f7d4636ca0bbcf094e9cc4380e64901fcf49e30ea8_ppc64le as a component of Quay v3 | *, quay/quay-bridge-operator-bundle@sha256:5a20c2d291a56f0d660071f7d4636ca0bbcf094e9cc4380e64901fcf49e30ea8_ppc64le |
| Red Hat | quay/clair-rhel8@sha256:8c4dc7ffe59ab71bafc90e57b4c8f31879e18127d7c688ad13fc74b218b81b90_s390x as a component of Quay v3 | quay/clair-rhel8@sha256:8c4dc7ffe59ab71bafc90e57b4c8f31879e18127d7c688ad13fc74b218b81b90_s390x, * |
| Red Hat | quay/quay-container-security-operator-rhel8@sha256:5d63f41839d712a348c91d7a90593ba332cab8e77f2238cc885792af9b45e89a_amd64 as a component of Quay v3 | quay/quay-container-security-operator-rhel8@sha256:5d63f41839d712a348c91d7a90593ba332cab8e77f2238cc885792af9b45e89a_amd64, * |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:8f7ea21b962abb00500141db4abf43d7c80ed585cbddcbe37c491bdbca1690d7_amd64 as a component of Quay v3 | quay/quay-bridge-operator-rhel8@sha256:8f7ea21b962abb00500141db4abf43d7c80ed585cbddcbe37c491bdbca1690d7_amd64, * |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:9b37ea0b977e20326facc581b6980b187cfc0d5e5ed6eb1e6a6c8794321ec994_s390x as a component of Quay v3 | quay/quay-bridge-operator-bundle@sha256:9b37ea0b977e20326facc581b6980b187cfc0d5e5ed6eb1e6a6c8794321ec994_s390x, * |
| Red Hat | quay/quay-container-security-operator-rhel8@sha256:46322de9eeb0681da5ab4d83432ce7a8791ae604e59ec162fcf96319cc248d02_s390x as a component of Quay v3 | *, * |
| Red Hat | quay/quay-operator-rhel8@sha256:ee4755634f7be2e4a68ef4ae4d89cde8964d1ea62fa233b10f7456ff82cbe9fc_ppc64le as a component of Quay v3 | *, * |
| Red Hat | quay/clair-rhel8@sha256:bf9818512c7fe88272fb8f7fc4a255d6bc5e3842582e4fd891558a89d406d8e9_ppc64le as a component of Quay v3 | *, * |
| Red Hat | quay/quay-operator-bundle@sha256:a91bb0d5e3becd59cadf51d323d1063ff675d277f9dfc7670570b1754badfacb_s390x as a component of Quay v3 | *, * |
| Red Hat | quay/quay-operator-bundle@sha256:6cea661a5c6e0a5927b3a5a06129fc03e6678132faf9e3da5f498d8457fb2211_ppc64le as a component of Quay v3 | *, quay/quay-operator-bundle@sha256:6cea661a5c6e0a5927b3a5a06129fc03e6678132faf9e3da5f498d8457fb2211_ppc64le |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:d8039e2970871d4d252f38d18587a5a7f0cdee34cceb15645e52f37b8d943f59_s390x as a component of Quay v3 | *, quay/quay-container-security-operator-bundle@sha256:d8039e2970871d4d252f38d18587a5a7f0cdee34cceb15645e52f37b8d943f59_s390x |
| Red Hat | quay/quay-container-security-operator-rhel8@sha256:6a5acdbb57f870efddfb93095522c3640f9ad6256c54a20f4790874d13322560_ppc64le as a component of Quay v3 | *, quay/quay-container-security-operator-rhel8@sha256:6a5acdbb57f870efddfb93095522c3640f9ad6256c54a20f4790874d13322560_ppc64le |
| Red Hat | quay/quay-rhel8@sha256:1a839e21cba19ea055e39f944620264bacb434fb1b6f2120fc3b8d7c3a29aae0_amd64 as a component of Quay v3 | quay/quay-rhel8@sha256:1a839e21cba19ea055e39f944620264bacb434fb1b6f2120fc3b8d7c3a29aae0_amd64, * |
| Red Hat | quay/quay-operator-rhel8@sha256:0702ae5634f99cb0775acdf0c9173a2a119816dd4e593462a9b0573ace330e2b_amd64 as a component of Quay v3 | *, quay/quay-operator-rhel8@sha256:0702ae5634f99cb0775acdf0c9173a2a119816dd4e593462a9b0573ace330e2b_amd64 |
…and 10 more
Timeline
- Feb 24, 2025 CVE Published
- May 10, 2026 Security Advisory
- May 10, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2025:1598 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_1598.json advisory
- https://access.redhat.com/security/cve/CVE-2020-11023 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1850004 issue
- https://www.cve.org/CVERecord?id=CVE-2020-11023 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-11023 advisory
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit