Red Hat Security AdvisoryRHSA-2025:1515
idm:DL1 security update
Released 2025-02-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) bind-dyndb-ldap-11.2-3.module+el8.2.0+21753+7109ce90.3.src::idm:DL1, bind-dyndb-ldap-11.2-3.module+el8.2.0+21753+7109ce90.3.x86_64::idm:DL1, custodia-0.6.0-3.module+el8.1.0+4098+f286395e.noarch::idm:DL1 +38
Fixes 1 record
Priority CRITICAL 88KEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.
CVSS 3.1MEDIUM 6.9· Network · No auth · User interaction · EPSS 0.84887 · Published 2020-04-29 · Partial fix · 3.5.0, 4.4.0 CWE-79