BIT-drupal-2020-11022: Medium severity jQuery JQuery vulnerability

Q: What conditions are required for exploitation?

An attacker must be able to supply HTML from an untrusted source that the application passes to a jQuery DOM manipulation method such as .html() or .append(). Exploitation also requires user interaction, as reflected by the UI:R vector.

Q: Are applications affected if they sanitize untrusted HTML first?

Yes. The issue can occur even when untrusted HTML has been sanitized before it is passed to the affected jQuery DOM manipulation methods.

Q: Which jQuery versions are affected and what version fixes the issue?

jQuery versions starting with 1.12.0 and before 3.5.0 are affected. The issue is patched in jQuery 3.5.0.

Published Apr 29, 2020

Updated

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Affected Software

1 affected component

jQuery JQuery>=1.12.0<3.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade jQuery to a version that resolves this vulnerability.
Fixed in 3.5.0

Event History

Apr 29, 2020

CVE Published

via OSV·10:15 PM

Data Sourced

via OSV·10:15 PM

DescriptionSeverity

Frequently Asked Questions

What conditions are required for exploitation?

An attacker must be able to supply HTML from an untrusted source that the application passes to a jQuery DOM manipulation method such as .html() or .append(). Exploitation also requires user interaction, as reflected by the UI:R vector.

Are applications affected if they sanitize untrusted HTML first?

Yes. The issue can occur even when untrusted HTML has been sanitized before it is passed to the affected jQuery DOM manipulation methods.

Which jQuery versions are affected and what version fixes the issue?

jQuery versions starting with 1.12.0 and before 3.5.0 are affected. The issue is patched in jQuery 3.5.0.

BIT-drupal-2020-11022: Medium severity jQuery JQuery vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What conditions are required for exploitation?

Are applications affected if they sanitize untrusted HTML first?

Which jQuery versions are affected and what version fixes the issue?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required for exploitation?

Are applications affected if they sanitize untrusted HTML first?

Which jQuery versions are affected and what version fixes the issue?