{
"id": "GHSA-2pqj-h3vj-pqgw",
"aliases": [
"CVE-2012-6708"
],
"details": "Affected versions of `jquery` are vulnerable to cross-site scripting. This occurs because the main `jquery` function uses a regular expression to differentiate between HTML and selectors, but does not properly anchor the regular expression. The result is that `jquery` may interpret HTML as selectors when given certain inputs, allowing for client side code execution.\n\n## Proof of Concept\n```\n$(\"#log\").html(\n $(\"element[attribute='<img src=\\\"x\\\" onerror=\\\"alert(1)\\\" />']\").html()\n);\n```\n\n\n\n\n## Recommendation\n\nUpdate to version 1.9.0 or later.",
"summary": "Cross-Site Scripting in jquery",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.0"
}
]
}
],
"package": {
"name": "jquery",
"ecosystem": "npm"
},
"database_specific": {
"last_known_affected_version_range": "<= 1.8.3"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.0"
}
]
}
],
"package": {
"name": "org.webjars.npm:jquery",
"ecosystem": "Maven"
},
"database_specific": {
"last_known_affected_version_range": "<= 1.8.3"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.0"
}
]
}
],
"package": {
"name": "jQuery",
"ecosystem": "NuGet"
},
"database_specific": {
"last_known_affected_version_range": "<= 1.8.3"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.2.0"
}
]
}
],
"package": {
"name": "jquery-rails",
"ecosystem": "RubyGems"
}
}
],
"modified": "2023-06-26T17:03:57Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"published": "2020-09-01T16:41:46Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16011",
"type": "ADVISORY"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6708",
"type": "ADVISORY"
},
{
"url": "https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d",
"type": "WEB"
},
{
"url": "https://web.archive.org/web/20200227132049/http://www.securityfocus.com/bid/102792",
"type": "WEB"
},
{
"url": "https://snyk.io/vuln/npm:jquery:20120206",
"type": "WEB"
},
{
"url": "https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450223",
"type": "WEB"
},
{
"url": "https://research.insecurelabs.org/jquery/test",
"type": "WEB"
},
{
"url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E",
"type": "WEB"
},
{
"url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E",
"type": "WEB"
},
{
"url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E",
"type": "WEB"
},
{
"url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
"type": "WEB"
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2012-6708.yml",
"type": "WEB"
},
{
"url": "https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67",
"type": "WEB"
},
{
"url": "https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59",
"type": "WEB"
},
{
"url": "https://github.com/jquery/jquery",
"type": "PACKAGE"
},
{
"url": "https://bugs.jquery.com/ticket/9521",
"type": "WEB"
},
{
"url": "https://bugs.jquery.com/ticket/6429",
"type": "WEB"
},
{
"url": "https://bugs.jquery.com/ticket/12531",
"type": "WEB"
},
{
"url": "https://bugs.jquery.com/ticket/11290",
"type": "WEB"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html",
"type": "WEB"
},
{
"url": "http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html",
"type": "WEB"
},
{
"url": "http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-64",
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": "2018-01-18T23:29:00Z",
"github_reviewed_at": "2020-08-31T18:19:31Z"
}
}