CVE-2020-11023

Description

JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2020-11023
• https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
• https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
• https://github.com/GarlicB/jquery35-local-agent
• https://raw.githubusercontent.com/GarlicB/jquery35-local-agent/main/RUN_EXAMPLES_KO.txt
• https://raw.githubusercontent.com/GarlicB/jquery35-local-agent/main/VENDOR_COMPAT_KO.md
• https://raw.githubusercontent.com/GarlicB/jquery35-local-agent/main/jquery35-local-agent-v5.js
• https://raw.githubusercontent.com/GarlicB/jquery35-local-agent/main/project-profile.public.sample.json
• https://raw.githubusercontent.com/GarlicB/jquery35-local-agent/main/project-profile.sample.json
• https://raw.githubusercontent.com/GarlicB/jquery35-local-agent/main/run-jquery35-v5.js
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-0387
• https://www.debian.org/security/2020/dsa-4693
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K/
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://jquery.com/upgrade-guide/3.5/
• https://security.netapp.com/advisory/ntap-20200511-0006/
• https://www.drupal.org/sa-core-2020-002
• https://blog.jquery.com/2020/04/10/jquery-3-5-0-released
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html
• https://security.gentoo.org/glsa/202007-03
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html
• https://lists.apache.org/thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec%40%3Cissues.hive.apache.org%3E
• https://lists.apache.org/thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248%40%3Cdev.hive.apache.org%3E
• https://lists.apache.org/thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15%40%3Cissues.hive.apache.org%3E
• https://lists.apache.org/thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c%40%3Cgitbox.hive.apache.org%3E
• https://lists.apache.org/thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea%40%3Cissues.hive.apache.org%3E
• https://lists.apache.org/thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9%40%3Cissues.hive.apache.org%3E
• https://lists.apache.org/thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49%40%3Cissues.hive.apache.org%3E
• https://lists.apache.org/thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7%40%3Cissues.hive.apache.org%3E