Duplicate Advisory: jQuery Cross Site Scripting vulnerability
## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of [GHSA-jpcq-cgw6-v4j6](https://github.com/advisories/GHSA-jpcq-cgw6-v4j6). This link is maintained to preserve external references. ## Original Description Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0 allows a remote attacker to execute arbitrary code via the `<options>` element.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-23064US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-20… | ||||
02
references
External citations — patches, advisories, analysis.
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-releasedWEB
- https://github.com/advisories/GHSA-jpcq-cgw6-v4j6ADVISORY
- https://github.com/jquery/jqueryPACKAGE
- https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77WEB
- https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#410WEB
- https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#440WEB
- https://github.com/rails/jquery-rails/blob/v4.3.5/vendor/assets/javascripts/jquery3.js#L5979WEB
- https://github.com/rails/jquery-rails/blob/v4.4.0/vendor/assets/javascripts/jquery3.js#L6162WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan