CVE-2010-5312

moderate-risk

Published 2014-11-24

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Do I need to act?

5.2% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Affected Products (8)

Debian Linux

Drill

Drupal

Debian Linux

Jquery Ui

Fedora

Snapcenter

Affected Vendors

Fedoraproject Jqueryui Apache Netapp Drupal Debian

References (38)

Exploit http://bugs.jqueryui.com/ticket/6016

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2015-0442.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2015-1462.html

Mailing List http://seclists.org/oss-sec/2014/q4/613

Mailing List http://seclists.org/oss-sec/2014/q4/616

Third Party Advisory http://www.debian.org/security/2015/dsa-3249

Patch http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Broken Link http://www.securityfocus.com/bid/71106

Broken Link http://www.securitytracker.com/id/1037035

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/98696

Vendor Advisory https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b...

Mailing List https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e...

Mailing List https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12e...

Mailing List https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d28...

Mailing List https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html

Mailing List https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

Third Party Advisory https://security.netapp.com/advisory/ntap-20190416-0007/

Third Party Advisory https://www.drupal.org/sa-core-2022-002

Exploit http://bugs.jqueryui.com/ticket/6016

and 18 more references

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 8/34 · Low

Exposure 14/34 · Moderate