{"id":"CVE-2012-6708","aliases":["ALPINE-CVE-2012-6708","AZL-40951","AZL-43897","AZL-44730","AZL-44937","CLSA-2026-1777336744","CLSA-2026-1787557579","CLSA-2026-1787916782","CLSA-2026-1787920143","CLSA-2026-1787920316","CLSA-2026-1788956475","EUVD-2020-0684","GHSA-2pqj-h3vj-pqgw","SUSE-SU-2020:0737-1","UBUNTU-CVE-2012-6708","USN-7622-1","openSUSE-SU-2020:0395-1"],"status":"published","title":"Cross-Site Scripting in jquery","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.08632,"percentile":0.95137,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-64","CWE-79"],"published":"2018-01-18T23:00:00Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"exploitdb","id":"EDB-49708","title":"Linksys EA7500 2.0.8.194281 - Cross-Site Scripting","type":"webapps","platform":"hardware","date":"2021-03-25","url":"https://www.exploit-db.com/exploits/49708"}],"fixes":[{"ecosystem":"npm","package":"jquery","fixed_in":["1.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.webjars.npm:jquery","fixed_in":["1.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"jQuery","fixed_in":["1.9.0"],"sources":["ghsa","osv"]},{"ecosystem":"RubyGems","package":"jquery-rails","fixed_in":["2.2.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.10","package":"ruby","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ceph","fixed_in":["18.2.2-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"python-blinker","fixed_in":["1.7.0-4"],"sources":["osv"]},{"ecosystem":"TuxCare:npm","package":"jquery","fixed_in":["1.8.2-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jquery","fixed_in":["1.7.2+dfsg-2ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.3"},{"fixed":"1.9.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.webjars.npm:jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.3"},{"fixed":"1.9.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"jQuery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.3"},{"fixed":"1.9.0"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"jquery-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.2-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.20.3-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-httplib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.20.3-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-blinker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-4"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2-tuxcare.0"},{"fixed":"1.8.2-tuxcare.2"}]}],"versions":["1.8.2","1.8.2-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.3-tuxcare.0"},{"fixed":"1.8.3-tuxcare.1"}]}],"versions":["1.8.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.1-tuxcare.0"},{"fixed":"1.4.1-tuxcare.1"}]}],"versions":["1.4.1"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.2-tuxcare.0"},{"fixed":"1.4.2-tuxcare.1"}]}],"versions":["1.4.2"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.3-tuxcare.0"},{"fixed":"1.4.3-tuxcare.1"}]}],"versions":["1.4.3"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:npm","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.2-tuxcare.0"},{"fixed":"1.3.2-tuxcare.1"}]}],"versions":["1.3.2"],"bundled":6},{"source":"osv","ecosystem":"npm","package":"jquery","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.9.0"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.webjars.npm:jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0"}]}],"versions":["1.7.2","1.7.3","1.8.2","1.8.3"]},{"source":"osv","ecosystem":"NuGet","package":"jQuery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0"}]}],"versions":["1.4.1","1.4.2","1.4.3","1.4.4","1.5.0","1.5.1","1.5.2","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.7.0","1.7.1","1.7.1.1","1.7.2","1.8.0","1.8.1","1.8.2","1.8.3"]},{"source":"osv","ecosystem":"RubyGems","package":"jquery-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0"}]}],"versions":["0.1.1","0.1.2","0.1.3","0.2","0.2.1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","1.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.0.rc","2.0.1","2.0.2","2.0.3","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-4.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2+dfsg-2ubuntu1+esm1"}]}],"versions":["1.7.2+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2+dfsg-2ubuntu1+esm1"}]}],"versions":["1.7.2+dfsg-2ubuntu1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3+dfsg-4ubuntu0.1~esm1"}]}],"versions":["1.7.2+dfsg-3ubuntu2","1.11.3+dfsg-4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-1ubuntu0.1~esm1"}]}],"versions":["3.1.1-2","3.2.1-1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ruby2.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-lp151.4.6.1"}]}],"bundled":7}],"products":[{"vendor":"jquery","product":"jquery"}],"references":[{"url":"https://snyk.io/vuln/npm:jquery:20120206","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web","report"]},{"url":"https://bugs.jquery.com/ticket/11290","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","advisory","evidence","report","web"]},{"url":"https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/102792","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://bugs.jquery.com/ticket/12531","tags":["web"]},{"url":"https://bugs.jquery.com/ticket/6429","tags":["web"]},{"url":"https://bugs.jquery.com/ticket/9521","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6708","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450223","tags":["web"]},{"url":"https://research.insecurelabs.org/jquery/test/"},{"url":"https://web.archive.org/web/20200227132049/http://www.securityfocus.com/bid/102792","tags":["web"]},{"url":"https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59","tags":["web"]},{"url":"https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2012-6708.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2pqj-h3vj-pqgw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2012-6708","tags":["advisory"]},{"url":"https://research.insecurelabs.org/jquery/test","tags":["web"]},{"url":"https://github.com/jquery/jquery","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200737-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140844","tags":["report"]},{"url":"https://bugzilla.suse.com/1152990","tags":["report"]},{"url":"https://bugzilla.suse.com/1152992","tags":["report"]},{"url":"https://bugzilla.suse.com/1152994","tags":["report"]},{"url":"https://bugzilla.suse.com/1152995","tags":["report"]},{"url":"https://bugzilla.suse.com/1162396","tags":["report"]},{"url":"https://bugzilla.suse.com/1164804","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8130","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2012-6708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6708","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7622-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-11358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11023","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZJAMCVFC2KL342QI4W5HGYIZXTNBURQT/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-6708","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:00:00Z","modified":"2024-08-06T21:36:02.207Z","updated_at":"2026-11-02T14:34:50.94153Z"}],"euvd":[{"id":"EUVD-2020-0684","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:00:00Z","modified":"2024-08-06T21:36:02Z","updated_at":"2026-11-03T01:56:01.523697Z"}],"ghsa":[{"id":"GHSA-2pqj-h3vj-pqgw","title":"Cross-Site Scripting in jquery","description":"Affected versions of `jquery` are vulnerable to cross-site scripting. This occurs because the main `jquery` function uses a regular expression to differentiate between HTML and selectors, but does not properly anchor the regular expression. The result is that `jquery` may interpret HTML as selectors when given certain inputs, allowing for client side code execution.\n\n## Proof of Concept\n```\n$(\"#log\").html(\n    $(\"element[attribute='\u003cimg src=\\\"x\\\" onerror=\\\"alert(1)\\\" /\u003e']\").html()\n);\n```\n\n\n\n\n## Recommendation\n\nUpdate to version 1.9.0 or later.","status":"published","published":"2020-09-01T16:41:46Z","modified":"2023-07-10T13:00:14Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-64","CWE-79"],"updated_at":"2026-11-02T14:36:56.605555Z"}],"nvd":[{"id":"CVE-2012-6708","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00.213Z","modified":"2026-06-16T23:48:38.84Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:18.043773Z"}],"osv":[{"id":"ALPINE-CVE-2012-6708","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00.213Z","modified":"2026-10-23T17:17:54.867799965Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"AZL-40951","title":"CVE-2012-6708 affecting package ceph for versions less than 18.2.2-1","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"AZL-43897","title":"CVE-2012-6708 affecting package python-httplib2 0.20.3-3","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00Z","modified":"2026-04-21T04:31:12.606988Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44730","title":"CVE-2012-6708 affecting package python-httplib2 0.20.3-3","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44937","title":"CVE-2012-6708 affecting package python-blinker for versions less than 1.7.0-4","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00Z","modified":"2026-04-21T04:51:21.815745Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"CVE-2012-6708","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00Z","modified":"2026-04-10T03:42:36.92707Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"GHSA-2pqj-h3vj-pqgw","title":"Cross-Site Scripting in jquery","description":"Affected versions of `jquery` are vulnerable to cross-site scripting. This occurs because the main `jquery` function uses a regular expression to differentiate between HTML and selectors, but does not properly anchor the regular expression. The result is that `jquery` may interpret HTML as selectors when given certain inputs, allowing for client side code execution.\n\n## Proof of Concept\n```\n$(\"#log\").html(\n    $(\"element[attribute='\u003cimg src=\\\"x\\\" onerror=\\\"alert(1)\\\" /\u003e']\").html()\n);\n```\n\n\n\n\n## Recommendation\n\nUpdate to version 1.9.0 or later.","status":"published","published":"2020-09-01T16:41:46Z","modified":"2024-03-08T05:20:14.907785Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-64","CWE-79"],"updated_at":"2026-11-02T15:46:34.700741Z"},{"id":"UBUNTU-CVE-2012-6708","description":"jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '\u003c' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '\u003c' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.","status":"published","published":"2018-01-18T23:29:00Z","modified":"2026-02-04T02:15:14.58541Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:06.854805Z"},{"id":"CLSA-2026-1777336744","title":"TuxCare security update for jquery (1 CVE)","description":"TuxCare rebuilt jquery to address 1 CVE. Fixed in 1.8.2-tuxcare.2.","status":"published","published":"2026-08-04T14:52:29Z","modified":"2026-10-15T09:45:49.330164156Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1787557579","title":"TuxCare security update for jquery (6 CVEs)","description":"TuxCare rebuilt jquery to address 6 CVEs. Fixed in 1.8.3-tuxcare.1.","status":"published","published":"2026-08-24T07:46:19Z","modified":"2026-10-15T09:45:32.73757161Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787916782","title":"TuxCare security update for jquery (7 CVEs)","description":"TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.1-tuxcare.1.","status":"published","published":"2026-08-28T11:33:02Z","modified":"2026-10-15T09:48:03.108876655Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1787920143","title":"TuxCare security update for jquery (8 CVEs)","description":"TuxCare rebuilt jquery to address 8 CVEs. Fixed in 1.4.2-tuxcare.1.","status":"published","published":"2026-08-28T12:29:03Z","modified":"2026-10-15T09:48:03.182510065Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1787920316","title":"TuxCare security update for jquery (7 CVEs)","description":"TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.3-tuxcare.1.","status":"published","published":"2026-08-28T12:31:56Z","modified":"2026-10-15T09:48:03.111008671Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788956475","title":"TuxCare security update for jquery (6 CVEs)","description":"TuxCare rebuilt jquery to address 6 CVEs. Fixed in 1.3.2-tuxcare.1.","status":"published","published":"2026-09-09T12:21:15Z","modified":"2026-10-15T09:47:55.440487334Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"openSUSE-SU-2020:0395-1","title":"Recommended update for ruby2.5","description":"This update for ruby2.5 toversion 2.5.7  fixes the following issues:\n\t  \nruby 2.5 was updated to version 2.5.7 \n\n- CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804).\n- CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and \n  Shell#test (bsc#1152990).\n- CVE-2019-16254: Fixed am HTTP response splitting in WEBrick (bsc#1152992).\n- CVE-2019-15845: Fixed a null injection vulnerability of File.fnmatch and \n  File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service of WEBrick \n  Digest access authentication (bsc#1152995).\n- CVE-2012-6708: Fixed an XSS in JQuery\n- CVE-2015-9251: Fixed an XSS in JQuery\n- Fixed unit tests (bsc#1140844)\n- Removed some unneeded test files (bsc#1162396).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-03-28T17:16:57Z","modified":"2026-02-04T02:31:59.189868Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2020:0737-1","title":"Recommended update for ruby2.5","description":"This update for ruby2.5 toversion 2.5.7  fixes the following issues:\n\t  \nruby 2.5 was updated to version 2.5.7 \n\n- CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804).\n- CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and \n  Shell#test (bsc#1152990).\n- CVE-2019-16254: Fixed am HTTP response splitting in WEBrick (bsc#1152992).\n- CVE-2019-15845: Fixed a null injection vulnerability of File.fnmatch and \n  File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service of WEBrick \n  Digest access authentication (bsc#1152995).\n- CVE-2012-6708: Fixed an XSS in JQuery\n- CVE-2015-9251: Fixed an XSS in JQuery\n- Fixed unit tests (bsc#1140844)\n- Removed some unneeded test files (bsc#1162396).\n","status":"published","published":"2020-03-20T12:47:31Z","modified":"2025-05-02T04:03:54.783923Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-7622-1","title":"jquery vulnerabilities","description":"It was discovered that jQuery did not correctly handle HTML tags. An\nattacker could possibly use this issue to execute a cross-site scripting\n(XSS) attack. This issue only affected Ubuntu 14.04 LTS. (CVE-2012-6708)\n\nIt was discovered that jQuery did not correctly handle unsanitized source\nobjects due to prototype pollution. An attacker could possibly use this\nissue to execute a cross-site scripting (XSS) attack. (CVE-2019-11358)\n\nMasato Kinugawa discovered that jQuery did not correctly sanitize certain\nHTML elements. An attacker could possibly use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-11022)\n\nMasato Kinugawa discovered that jQuery did not correctly sanitize certain\nHTML elements. An attacker could possibly use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected \nUbuntu 18.04 LTS. (CVE-2020-11023)","status":"published","published":"2025-07-08T00:35:06Z","modified":"2026-06-25T13:32:30.511683115Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}