VDB
RHBA-2025%3A1599
RHBA-2025%3A1599
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in jQuery. HTML containing \<option\> elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | quay/quay-operator-bundle@sha256:03d6966a76dc2caf6e9cfc009342be32fa9824e6f191ce5b19fcbe5fb45c2ffb_amd64 as a component of Quay v3 | *, quay/quay-operator-bundle@sha256:03d6966a76dc2caf6e9cfc009342be32fa9824e6f191ce5b19fcbe5fb45c2ffb_amd64 |
| Red Hat | quay/quay-builder-rhel8@sha256:5f81ddef9a2437c724d293b3accd3ca0187e2c3d409257d39b7f1dbdfdb1b47e_ppc64le as a component of Quay v3 | *, quay/quay-builder-rhel8@sha256:5f81ddef9a2437c724d293b3accd3ca0187e2c3d409257d39b7f1dbdfdb1b47e_ppc64le |
| Red Hat | quay/quay-operator-bundle@sha256:eb72dbb111fb0488643bd09b451e6e884c2af236dcad2863ab5be873d50573a6_ppc64le as a component of Quay v3 | *, quay/quay-operator-bundle@sha256:eb72dbb111fb0488643bd09b451e6e884c2af236dcad2863ab5be873d50573a6_ppc64le |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:f255b26a3e2156e2bdd1877ab2e2bf6c98e8cbafed05fa307aa8b52c04d091b1_amd64 as a component of Quay v3 | *, quay/quay-bridge-operator-bundle@sha256:f255b26a3e2156e2bdd1877ab2e2bf6c98e8cbafed05fa307aa8b52c04d091b1_amd64 |
| Red Hat | quay/quay-builder-qemu-rhcos-rhel8@sha256:7c619cc603d57e44d861856c5162e84923d87787c17613857e8d51f3ef4050c3_s390x as a component of Quay v3 | quay/quay-builder-qemu-rhcos-rhel8@sha256:7c619cc603d57e44d861856c5162e84923d87787c17613857e8d51f3ef4050c3_s390x, * |
| Red Hat | quay/quay-builder-rhel8@sha256:76284d20210b23e0bd924fcd87090257896ba77a8dcdab1a01564982db444664_s390x as a component of Quay v3 | *, * |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:6134fd306361614404008d9c8d38d41a88e5d496fe27d7e359f46d6f30fe9dc3_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:03eee647fc3ebd47a6883b72d7000d8e6b7632ed76dd416de1ec67f36de23cb2_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:81ff35e4cc924a4136abf7299395877a784e2fa181e481efe3340712626144c3_ppc64le as a component of Quay v3 | *, quay/quay-bridge-operator-rhel8@sha256:81ff35e4cc924a4136abf7299395877a784e2fa181e481efe3340712626144c3_ppc64le |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:10630145c20a6e142b4a49ca42990467f6378e1832985df5c9c4f1deefeb5ad0_s390x as a component of Quay v3 | *, * |
| Red Hat | quay/quay-container-security-operator-rhel8@sha256:2dfaef2d69f72a3efe4ad941f29da00258a18b88aaeb3435afe4c78fceddf847_ppc64le as a component of Quay v3 | quay/quay-container-security-operator-rhel8@sha256:2dfaef2d69f72a3efe4ad941f29da00258a18b88aaeb3435afe4c78fceddf847_ppc64le, * |
| Red Hat | quay/quay-operator-rhel8@sha256:7cc512e89aaaacde997a4908e52f33173f0f3e4178f6449572d49da8b50e10d6_s390x as a component of Quay v3 | quay/quay-operator-rhel8@sha256:7cc512e89aaaacde997a4908e52f33173f0f3e4178f6449572d49da8b50e10d6_s390x, * |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:7a9781bf54a72ea7cf61965043a0fdce7c5f1e5cbd9bfbd1203c94510c4e96b8_ppc64le as a component of Quay v3 | *, * |
| Red Hat | quay/quay-rhel8@sha256:4964472329ea4d13842732a2de187443a1f383928041044d5621219912440d65_s390x as a component of Quay v3 | quay/quay-rhel8@sha256:4964472329ea4d13842732a2de187443a1f383928041044d5621219912440d65_s390x, * |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:a211e80601adefb01aa19f50882bf5dddafc21bd35c47c4d4e044172bd70cbe4_s390x as a component of Quay v3 | *, quay/quay-bridge-operator-bundle@sha256:a211e80601adefb01aa19f50882bf5dddafc21bd35c47c4d4e044172bd70cbe4_s390x |
| Red Hat | quay/quay-builder-qemu-rhcos-rhel8@sha256:bab6d6b27ad3ed42bc816af7e5253fd9be45c13b4d272008593271e569e2c8fa_amd64 as a component of Quay v3 | quay/quay-builder-qemu-rhcos-rhel8@sha256:bab6d6b27ad3ed42bc816af7e5253fd9be45c13b4d272008593271e569e2c8fa_amd64, * |
| Red Hat | quay/quay-container-security-operator-rhel8@sha256:3987efeb2b67b08b078ede3772ea302369ef7ac7bd2f7f8830274acf96e48f26_s390x as a component of Quay v3 | *, quay/quay-container-security-operator-rhel8@sha256:3987efeb2b67b08b078ede3772ea302369ef7ac7bd2f7f8830274acf96e48f26_s390x |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:c5432bdaf5a4f76d8bbe1e0f15f68d55aef859b373373a4128062808792e1ef9_s390x as a component of Quay v3 | quay/quay-container-security-operator-bundle@sha256:c5432bdaf5a4f76d8bbe1e0f15f68d55aef859b373373a4128062808792e1ef9_s390x, * |
| Red Hat | quay/clair-rhel8@sha256:222ccf497cd725a8a519bf5bb70114aaaeae202ab6261773de68739f8288e5a9_s390x as a component of Quay v3 | quay/clair-rhel8@sha256:222ccf497cd725a8a519bf5bb70114aaaeae202ab6261773de68739f8288e5a9_s390x, * |
| Red Hat | quay/quay-operator-bundle@sha256:7abf56ac447f36f85b0c3da70cca5c85826241b2fbcef9abc7ed734cf993e574_s390x as a component of Quay v3 | *, quay/quay-operator-bundle@sha256:7abf56ac447f36f85b0c3da70cca5c85826241b2fbcef9abc7ed734cf993e574_s390x |
…and 10 more
Timeline
- Feb 24, 2025 CVE Published
- May 10, 2026 Security Advisory
- May 10, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2025:1599 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1850004 issue
- https://www.cve.org/CVERecord?id=CVE-2020-11023 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-11023 advisory
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_1599.json advisory
- https://access.redhat.com/security/cve/CVE-2020-11023 advisory