CVE-2012-6708GHSA-2PQJ-H3VJ-PQGW
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.9.0, 2.2.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 on Exploit-DB
Summary
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
Timeline
- CVE published
- Public exploit on Exploit-DB
EDB-49708
- Record last updated
Affected versions
- n/a n/a
Version range not reported
- jquerynpm
fixed in 1.9.0
- org.webjars.npm:jqueryMaven
fixed in 1.9.0
- jQueryNuGet
fixed in 1.9.0
- jquery-railsRubyGems
fixed in 2.2.0