CVE-2010-5312
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 18%
probabilidade de exploração
18%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Produtos afetados
n/a · n/aReferências
http://bugs.jqueryui.com/ticket/6016http://rhn.redhat.com/errata/RHSA-2015-0442.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1462.htmlhttp://seclists.org/oss-sec/2014/q4/613http://seclists.org/oss-sec/2014/q4/616https://exchange.xforce.ibmcloud.com/vulnerabilities/98696https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3Ehttps://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3Ehttps://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3Ehttps://lists.debian.org/debian-lts-announce/2022/01/msg00014.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/