CVEvulnerability
CVE-2010-5312
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Affected configurations
• debian debian linux 7.0
• jqueryui jquery ui (< 1.10.0)
• fedoraproject fedora 35
• fedoraproject fedora 36
• netapp snapcenter
• apache drill 1.16.0
• drupal drupal (>= 7.0 < 7.86)
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugs.jqueryui.com/ticket/6016 Exploit, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0442.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1462.html Third Party Advisory
- http://seclists.org/oss-sec/2014/q4/613 Mailing List, Third Party Advisory
- http://seclists.org/oss-sec/2014/q4/616 Mailing List, Third Party Advisory
- http://www.debian.org/security/2015/dsa-3249 Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/71106 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037035 Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98696 Third Party Advisory, VDB Entry
- https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3 Vendor Advisory
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/ Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190416-0007/ Third Party Advisory
- https://www.drupal.org/sa-core-2022-002 Third Party Advisory
- http://bugs.jqueryui.com/ticket/6016 Exploit, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0442.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1462.html Third Party Advisory
- http://seclists.org/oss-sec/2014/q4/613 Mailing List, Third Party Advisory
- http://seclists.org/oss-sec/2014/q4/616 Mailing List, Third Party Advisory
- http://www.debian.org/security/2015/dsa-3249 Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/71106 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037035 Broken Link, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98696 Third Party Advisory, VDB Entry
- https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3 Vendor Advisory
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/ Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190416-0007/ Third Party Advisory
- https://www.drupal.org/sa-core-2022-002 Third Party Advisory