Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g4r7-cj36-63v3

Опубликовано: 18 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component.

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component.

EPSS

Процентиль: 95%
0.1678
Средний

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
redhat
больше 1 года назад

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, and because the exploitation example does not indicate whether, or how, the example website is using jQuery UI.

CVSS3: 7.1
nvd
больше 1 года назад

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, and because the exploitation example does not indicate whether, or how, the example website is using jQuery UI.

CVSS3: 7.1
debian
больше 1 года назад

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1 ...

CVSS3: 7.1
fstec
больше 1 года назад

Уязвимость JavaScript-библиотеки jQuery UI, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю выполнить межсайтовую сценарную атаку

EPSS

Процентиль: 95%
0.1678
Средний

7.1 High

CVSS3

Дефекты

CWE-79