CVE-2010-5312
Fixed in a distro release EPSS 18%
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Products: debian_linux, jqueryui jquery_ui, fedoraproject fedora, netapp snapcenter, apache drill, drupal
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.webjars.npm:jquery-ui | 1.10.0 |
| NuGet | jQuery.UI.Combined | 1.10.0 |
| RubyGems | jquery-ui-rails | 4.0.0 |
| npm | jquery-ui | 1.10.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | jqueryui | 1.10.1+dfsg-1 |
| Debian 13 | jqueryui | 1.10.1+dfsg-1 |
| Debian 14 | jqueryui | 1.10.1+dfsg-1 |
| Debian 6.0 | jqueryui | 1.8.dfsg-3+deb6u1 |
| Debian 7 | jqueryui | 1.8.ooops.21+dfsg-2+deb7u1 |
| Debian 9 | drupal7 | 7.52-2+deb9u17 |
| Red Hat Enterprise Linux 6 | ipa | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-admintools | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-client | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-debuginfo | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-python | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-server | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-server-selinux | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 6 | ipa-server-trust-ad | 0:3.0.0-47.el6 |
| Red Hat Enterprise Linux 7 | ipa | 0:4.1.0-18.el7 |
| Red Hat Enterprise Linux 7 | ipa-admintools | 0:4.1.0-18.el7 |
| Red Hat Enterprise Linux 7 | ipa-client | 0:4.1.0-18.el7 |
| Red Hat Enterprise Linux 7 | ipa-debuginfo | 0:4.1.0-18.el7 |
| Red Hat Enterprise Linux 7 | ipa-python | 0:4.1.0-18.el7 |
| Red Hat Enterprise Linux 7 | ipa-server | 0:4.1.0-18.el7 |
| Red Hat Enterprise Linux 7 | ipa-server-trust-ad | 0:4.1.0-18.el7 |