CVEvulnerability

CVE-2020-11022

6.1 MEDIUM Published 2020-04-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Affected configurations

• jquery jquery (>= 1.2 < 3.5.0) • drupal drupal (>= 7.0 < 7.70) • drupal drupal (>= 8.7.0 < 8.7.14) • drupal drupal (>= 8.8.0 < 8.8.6) • debian debian linux 9.0 • fedoraproject fedora 31 • fedoraproject fedora 32 • fedoraproject fedora 33 • oracle agile product lifecycle management for process 6.2.0.0 • oracle application testing suite 13.3.0.1 • oracle banking digital experience 18.1 • oracle banking digital experience 18.2 • oracle banking digital experience 18.3 • oracle banking digital experience 19.1 • oracle banking digital experience 19.2 • oracle banking digital experience 20.1 • oracle blockchain platform (< 21.1.2) • oracle communications application session controller 3.8m0 • oracle communications billing and revenue management 7.5.0.23.0 • oracle communications billing and revenue management 12.0.0.3.0 • oracle communications diameter signaling router idih\ (>= 8.0.0 <= 8.2.2) • oracle communications eagle application processor (>= 16.1.0 <= 16.4.0) • oracle communications services gatekeeper 7.0 • oracle communications webrtc session controller 7.2 • oracle enterprise manager ops center 12.4.0.0 • oracle enterprise session border controller 8.4 • oracle financial services analytical applications infrastructure (>= 8.0.6.0.0 <= 8.1.0.0.0) • oracle financial services analytical applications reconciliation framework (>= 8.0.6 <= 8.0.8) • oracle financial services analytical applications reconciliation framework 8.1.0 • oracle financial services asset liability management 8.0.6 • oracle financial services asset liability management 8.0.7 • oracle financial services asset liability management 8.1.0 • oracle financial services balance sheet planning 8.0.8 • oracle financial services basel regulatory capital basic (>= 8.0.6 <= 8.0.8) • oracle financial services basel regulatory capital basic 8.1.0 • oracle financial services basel regulatory capital internal ratings based approach (>= 8.0.6 <= 8.0.8) • oracle financial services basel regulatory capital internal ratings based approach 8.1.0 • oracle financial services data foundation (>= 8.0.6 <= 8.1.0) • oracle financial services data governance for us regulatory reporting (>= 8.0.6 <= 8.0.9) • oracle financial services data integration hub 8.0.6 • oracle financial services data integration hub 8.0.7 • oracle financial services data integration hub 8.1.0 • oracle financial services funds transfer pricing 8.0.6 • oracle financial services funds transfer pricing 8.0.7 • oracle financial services funds transfer pricing 8.1.0 • oracle financial services hedge management and ifrs valuations (>= 8.0.6 <= 8.0.8) • oracle financial services hedge management and ifrs valuations 8.1.0 • oracle financial services institutional performance analytics 8.0.6 • oracle financial services institutional performance analytics 8.0.7 • oracle financial services institutional performance analytics 8.1.0 • oracle financial services liquidity risk management 8.0.6 • oracle financial services liquidity risk measurement and management 8.0.7 • oracle financial services liquidity risk measurement and management 8.0.8 • oracle financial services liquidity risk measurement and management 8.1.0 • oracle financial services loan loss forecasting and provisioning (>= 8.0.6 <= 8.0.8) • oracle financial services loan loss forecasting and provisioning 8.1.0 • oracle financial services market risk measurement and management 8.0.6 • oracle financial services market risk measurement and management 8.0.8 • oracle financial services price creation and discovery 8.0.6 • oracle financial services price creation and discovery 8.0.7 … and 61 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References