USN-5181-1: jQuery UI vulnerability
First published: Fri Sep 09 2022(Updated: )
It was discovered that jQuery UI did not properly validate the values from untrusted sources. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code. This issue affected only Ubuntu 18.04 ESM and Ubuntu 20.4 ESM. (CVE-2021-41184) It was discovered that jQuery UI checkboxradio widget did not properly decode certain values from HTML entities. An attacker could possibly use this issue to generate a cross-site scripting(XSS) attack, resulting in a crash or possibly execute arbitrary code. (CVE-2022-31160)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/node-jquery-ui | <1.13.1+dfsg-1ubuntu0.1~esm1 | 1.13.1+dfsg-1ubuntu0.1~esm1 |
| =22.04 | ||
| All of | ||
| ubuntu/libjs-jquery-ui | <1.13.1+dfsg-1ubuntu0.1~esm1 | 1.13.1+dfsg-1ubuntu0.1~esm1 |
| =22.04 | ||
| All of | ||
| ubuntu/node-jquery-ui | <1.12.1+dfsg-5ubuntu0.20.04.1~esm3 | 1.12.1+dfsg-5ubuntu0.20.04.1~esm3 |
| =20.04 | ||
| All of | ||
| ubuntu/libjs-jquery-ui | <1.12.1+dfsg-5ubuntu0.20.04.1~esm3 | 1.12.1+dfsg-5ubuntu0.20.04.1~esm3 |
| =20.04 | ||
| All of | ||
| ubuntu/node-jquery-ui | <1.12.1+dfsg-5ubuntu0.18.04.1~esm2 | 1.12.1+dfsg-5ubuntu0.18.04.1~esm2 |
| =18.04 | ||
| All of | ||
| ubuntu/libjs-jquery-ui | <1.12.1+dfsg-5ubuntu0.18.04.1~esm2 | 1.12.1+dfsg-5ubuntu0.18.04.1~esm2 |
| =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-41184?
The severity of CVE-2021-41184 is high.
How does CVE-2021-41184 affect Ubuntu 18.04 ESM?
CVE-2021-41184 affects Ubuntu 18.04 ESM and could potentially cause a crash or execute arbitrary code.
How does CVE-2021-41184 affect Ubuntu 20.04 ESM?
CVE-2021-41184 affects Ubuntu 20.04 ESM and could potentially cause a crash or execute arbitrary code.
What is the remedy for CVE-2021-41184 in Ubuntu 18.04 ESM?
The remedy for CVE-2021-41184 in Ubuntu 18.04 ESM is to update to version 1.12.1+dfsg-5ubuntu0.18.04.1~esm2 of the package 'libjs-jquery-ui'.
What is the remedy for CVE-2021-41184 in Ubuntu 20.04 ESM?
The remedy for CVE-2021-41184 in Ubuntu 20.04 ESM is to update to version 1.12.1+dfsg-5ubuntu0.20.04.1~esm3 of the package 'libjs-jquery-ui'.
What is the remedy for CVE-2021-41184 in Ubuntu 22.04?
There is no known remedy for CVE-2021-41184 in Ubuntu 22.04 as it is not affected by this vulnerability.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/usn
- source/Ubuntu
- anchor-related/USN-6419-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04