CVE-2012-6708 Cross-Site Scripting in jquery
MediumCVSS 6.1
EPSS 8.6%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm jquery(npm) | <= 1.8.3 | No fix listed |
| org.webjars.npm/jquery(Maven) | <= 1.8.3 | No fix listed |
| nuget jQuery(NuGet) | <= 1.8.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | < 2.2.0 | 2.2.0 |
| npm jquery(npm) | < 1.9.0 | 1.9.0 |
| org.webjars.npm/jquery(Maven) | < 1.9.0 | 1.9.0 |
| org.webjars.npm/jquery(Maven) | = 1.7.2 | No fix listed |
| org.webjars.npm/jquery(Maven) | = 1.7.3 | No fix listed |
| org.webjars.npm/jquery(Maven) | = 1.8.2 | No fix listed |
| org.webjars.npm/jquery(Maven) | = 1.8.3 | No fix listed |
| nuget jQuery(NuGet) | < 1.9.0 | 1.9.0 |
| nuget jQuery(NuGet) | = 1.4.1 | No fix listed |
| nuget jQuery(NuGet) | = 1.4.2 | No fix listed |
| nuget jQuery(NuGet) | = 1.4.3 | No fix listed |
| nuget jQuery(NuGet) | = 1.4.4 | No fix listed |
| nuget jQuery(NuGet) | = 1.5.0 | No fix listed |
| nuget jQuery(NuGet) | = 1.5.1 | No fix listed |
| nuget jQuery(NuGet) | = 1.5.2 | No fix listed |
| nuget jQuery(NuGet) | = 1.6.0 | No fix listed |
| nuget jQuery(NuGet) | = 1.6.1 | No fix listed |
| nuget jQuery(NuGet) | = 1.6.2 | No fix listed |
| nuget jQuery(NuGet) | = 1.6.3 | No fix listed |
| nuget jQuery(NuGet) | = 1.6.4 | No fix listed |
| nuget jQuery(NuGet) | = 1.7.0 | No fix listed |
| nuget jQuery(NuGet) | = 1.7.1 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| nuget jQuery(NuGet) | = 1.7.1.1 | No fix listed |
| nuget jQuery(NuGet) | = 1.7.2 | No fix listed |
| nuget jQuery(NuGet) | = 1.8.0 | No fix listed |
| nuget jQuery(NuGet) | = 1.8.1 | No fix listed |
| nuget jQuery(NuGet) | = 1.8.2 | No fix listed |
| nuget jQuery(NuGet) | = 1.8.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.1.1 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.1.2 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.1.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.1 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.2 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.4 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.5 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.6 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 0.2.7 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.1 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.10 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.11 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.12 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.13 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.14 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.15 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.16 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.17 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.18 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.19 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.2 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.4 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.5 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.6 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.7 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.8 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.9 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 1.0.rc | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.0.1 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.0.2 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.0.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.1.0 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.1.1 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.1.2 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.1.3 | No fix listed |
| rubygems jquery-rails(RubyGems) | = 2.1.4 | No fix listed |
| jquery | < 1.9.0 | 1.9.0 |
| alpine/ruby(Alpine:v3.10) | < 2.5.6-r0 | 2.5.6-r0 |
References
- bugs.jquery.com exploit issue-tracking vendor-advisory
- bugs.jquery.com
- bugs.jquery.com
- bugs.jquery.com
- nvd.nist.gov third-party-advisory vendor-advisory
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- help.ecostruxureit.com third-party-advisory
- lists.apache.org
- lists.apache.org
- lists.apache.org
- snyk.io patch third-party-advisory
- openSUSE-SU-2020:0395 vendor-advisory
- packetstormsecurity.com exploit
- packetstormsecurity.com exploit
- security.snyk.io
- research.insecurelabs.org
- web.archive.org
- github.com
- github.com
- github.com exploit
- github.com
- github.com product
- 102792 third-party-advisory vdb-entry
- [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities mailing-list
- [drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities mailing-list
- [drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities mailing-list
- security.alpinelinux.org vendor-advisory