CVE-2010-5312

Опубликовано: 03 сент. 2010

Источник: redhat

CVSS2: 4.3

Описание

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Затронутые пакеты

Платформа	Пакет	Состояние
CloudForms Management Engine 5	ruby193-rubygem-jquery-rails	Will not fix
OpenShift Enterprise 1	ruby193-rubygem-jquery-rails	Will not fix
OpenStack Foreman	ruby193-rubygem-jquery-ui-rails	Will not fix
Red Hat Enterprise Linux 6	python-sphinx	Will not fix
Red Hat Enterprise Linux 7	python-sphinx	Will not fix
Red Hat Enterprise Linux 7	yelp-xsl	Will not fix
Red Hat OpenShift Enterprise 2	ruby193-rubygem-jquery-rails	Will not fix
Red Hat OpenStack Platform 4	ruby193-rubygem-jquery-rails	Will not fix
Red Hat Satellite 6	ruby193-rubygem-jquery-ui-rails	Will not fix
Red Hat Software Collections for Red Hat Enterprise Linux	ror40-rubygem-jquery-rails	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=1166041jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2010-5312

CVSS3: 6.1

ubuntu

больше 10 лет назад

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

CVE-2010-5312

CVSS3: 6.1

nvd

больше 10 лет назад

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.