Red Hat Security AdvisoryRHSA-2021:4142
pcs security, bug fix, and enhancement update
Released 2021-11-09 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux High Availability (v. 8) pcs-0.10.10-4.el8, pcs-snmp-0.10.10-4.el8
- Red Hat Enterprise Linux Resilient Storage (v. 8) pcs-0.10.10-4.el8, pcs-snmp-0.10.10-4.el8
Fixes 3 records
Priority CRITICAL 88KEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.84887 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 CWE-79
Priority HIGH 69
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.8682 · Published 2019-04-19 · Partial fix · 3.4.0, 4.3.4 +3 CWE-1321
Priority LOW 37
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.06428 · Published 2020-05-19 · Partial fix · 1.9.0, 2.2.0 CWE-79
