CVEvulnerability
CVE-2012-6662
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Affected configurations
• redhat enterprise linux desktop 7.0
• redhat enterprise linux hpc node 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux workstation 7.0
• jqueryui jquery ui 1.10.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugs.jqueryui.com/ticket/8859 Issue Tracking, Vendor Advisory
- http://bugs.jqueryui.com/ticket/8861 Issue Tracking, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0442.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1462.html rhn.redhat.com
- http://seclists.org/oss-sec/2014/q4/613 Third Party Advisory, VDB Entry
- http://seclists.org/oss-sec/2014/q4/616 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/71107 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98697 exchange.xforce.ibmcloud.com
- https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e Issue Tracking, Patch, Third Party Advisory
- https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde Issue Tracking, Patch, Third Party Advisory
- https://github.com/jquery/jquery/issues/2432 github.com
- http://bugs.jqueryui.com/ticket/8859 Issue Tracking, Vendor Advisory
- http://bugs.jqueryui.com/ticket/8861 Issue Tracking, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0442.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1462.html rhn.redhat.com
- http://seclists.org/oss-sec/2014/q4/613 Third Party Advisory, VDB Entry
- http://seclists.org/oss-sec/2014/q4/616 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/71107 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98697 exchange.xforce.ibmcloud.com
- https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e Issue Tracking, Patch, Third Party Advisory
- https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde Issue Tracking, Patch, Third Party Advisory
- https://github.com/jquery/jquery/issues/2432 github.com