VDB
RHBA-2025%3A1600
RHBA-2025%3A1600
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in jQuery. HTML containing \<option\> elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | quay/quay-rhel8@sha256:59bec1f6dee73acd7e2df63feb1f577dc8e9c391fe5b18b3c1535f2fa4cbbae9_s390x as a component of Quay v3 | *, * |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:a078bb2fa0842ccbc40d26572f6b79beb78e9fb602c99c4bb6bca53040fce04f_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/quay-operator-bundle@sha256:d4f2c24ed74f76af477427b7bb7159d08f480fa9890cb1227307b286c9be2771_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/quay-builder-qemu-rhcos-rhel8@sha256:294b33b88cda984cea4e86ffa86bc56ea163c741d0c429fc95523e7ce3e289cd_amd64 as a component of Quay v3 | quay/quay-builder-qemu-rhcos-rhel8@sha256:294b33b88cda984cea4e86ffa86bc56ea163c741d0c429fc95523e7ce3e289cd_amd64, * |
| Red Hat | quay/quay-bridge-operator-rhel8@sha256:22fcdc241bb49a88fb0384d09da023db070fae05eec6e37f7b4f52e4cdc35dab_ppc64le as a component of Quay v3 | *, * |
| Red Hat | quay/quay-operator-rhel8@sha256:d2b310ddc6c5d000234c8d8ac1c9e993c2de49426c251d36077c504a51ab9460_ppc64le as a component of Quay v3 | *, quay/quay-operator-rhel8@sha256:d2b310ddc6c5d000234c8d8ac1c9e993c2de49426c251d36077c504a51ab9460_ppc64le |
| Red Hat | quay/quay-builder-rhel8@sha256:bd60fd0dd4339f532af75f47b2fef45f5d859bec19727a72425aae148715c4ab_amd64 as a component of Quay v3 | *, quay/quay-builder-rhel8@sha256:bd60fd0dd4339f532af75f47b2fef45f5d859bec19727a72425aae148715c4ab_amd64 |
| Red Hat | quay/quay-builder-rhel8@sha256:3996e8ef02ed9b6cedf9bc8d6f25d3972d3558652613490013fe64b64331a22d_ppc64le as a component of Quay v3 | quay/quay-builder-rhel8@sha256:3996e8ef02ed9b6cedf9bc8d6f25d3972d3558652613490013fe64b64331a22d_ppc64le, * |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:e31825f0461cb54e6d21c36cb6bbbb8fbeb61943c459184836653a3a850a4089_amd64 as a component of Quay v3 | *, quay/quay-container-security-operator-bundle@sha256:e31825f0461cb54e6d21c36cb6bbbb8fbeb61943c459184836653a3a850a4089_amd64 |
| Red Hat | quay/quay-builder-qemu-rhcos-rhel8@sha256:48a2e4ce23e51c3196cfaf781b4419fb0939838776df046db062a075e103410f_s390x as a component of Quay v3 | quay/quay-builder-qemu-rhcos-rhel8@sha256:48a2e4ce23e51c3196cfaf781b4419fb0939838776df046db062a075e103410f_s390x, * |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:e322a843ea4578b7c24ee6486cb8cc430db4f22588b071f99522c42d5cca29ec_s390x as a component of Quay v3 | quay/quay-container-security-operator-bundle@sha256:e322a843ea4578b7c24ee6486cb8cc430db4f22588b071f99522c42d5cca29ec_s390x, * |
| Red Hat | quay/quay-container-security-operator-bundle@sha256:a6980f2d188b32ab0d9f78b471ded0c2c2b1f58746a4890a880dc6b9f257a2d0_ppc64le as a component of Quay v3 | *, quay/quay-container-security-operator-bundle@sha256:a6980f2d188b32ab0d9f78b471ded0c2c2b1f58746a4890a880dc6b9f257a2d0_ppc64le |
| Red Hat | quay/quay-container-security-operator-rhel8@sha256:64ce86fb690eef8d8a0896fa44b6292401222592ced1978ffb2450c9727fc50a_ppc64le as a component of Quay v3 | quay/quay-container-security-operator-rhel8@sha256:64ce86fb690eef8d8a0896fa44b6292401222592ced1978ffb2450c9727fc50a_ppc64le, * |
| Red Hat | quay/quay-builder-rhel8@sha256:937819ced9bd302aae3d048a470d50475b2e4c34347a4ff1c83843fda71ffe7f_s390x as a component of Quay v3 | quay/quay-builder-rhel8@sha256:937819ced9bd302aae3d048a470d50475b2e4c34347a4ff1c83843fda71ffe7f_s390x, * |
| Red Hat | quay/quay-rhel8@sha256:092d1d030ba909855a3de504e0373fc9cbf6d74dd5dca3f94b151e5c3ce4d6ff_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/clair-rhel8@sha256:2c2ecd3f49a8645eca1c4708e3c4e0e0771734b12e33d6cd6428d8a1ccc38719_amd64 as a component of Quay v3 | *, quay/clair-rhel8@sha256:2c2ecd3f49a8645eca1c4708e3c4e0e0771734b12e33d6cd6428d8a1ccc38719_amd64 |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:c5ba386cc65a303e5fcb76a407c5b47ec98e76b411e31f3498c3ec58d7653192_amd64 as a component of Quay v3 | *, * |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:02ca9f9006d62fd5549b7b17dff959a544d3561e19888bbadc9c83ec2366253a_s390x as a component of Quay v3 | quay/quay-bridge-operator-bundle@sha256:02ca9f9006d62fd5549b7b17dff959a544d3561e19888bbadc9c83ec2366253a_s390x, * |
| Red Hat | quay/quay-bridge-operator-bundle@sha256:dc892f7daf2e323d55ab7611738cf3e66e41fed377cbfb7cbc8758df8a2d36b7_ppc64le as a component of Quay v3 | *, quay/quay-bridge-operator-bundle@sha256:dc892f7daf2e323d55ab7611738cf3e66e41fed377cbfb7cbc8758df8a2d36b7_ppc64le |
| Red Hat | quay/quay-operator-bundle@sha256:4e5d9a6fe8e10dacf7b65f752b5d84bec38d707cba8bd95513fe7c9de7c75c47_s390x as a component of Quay v3 | *, quay/quay-operator-bundle@sha256:4e5d9a6fe8e10dacf7b65f752b5d84bec38d707cba8bd95513fe7c9de7c75c47_s390x |
…and 10 more
Timeline
- Feb 24, 2025 CVE Published
- May 10, 2026 Security Advisory
- May 10, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2025:1600 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_1600.json advisory
- https://access.redhat.com/security/cve/CVE-2020-11023 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1850004 issue
- https://www.cve.org/CVERecord?id=CVE-2020-11023 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-11023 advisory
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit