Red Hat Security AdvisoryRHSA-2020:4211
Red Hat AMQ Interconnect 1.9.0 release and security update
Released 2020-10-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat AMQ Interconnect 1 qpid-dispatch-1.13.0-3.el6_10, qpid-dispatch-1.13.0-3.el7, qpid-dispatch-1.13.0-3.el8 +12
Fixes 3 records
Priority CRITICAL 88KEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.84887 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 CWE-79
Priority HIGH 75
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.99215 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 +2 CWE-79
Priority LOW 37
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.06428 · Published 2020-05-19 · Partial fix · 1.9.0, 2.2.0 CWE-79
