Actively exploited · Published Apr 29, 2020 · Assigned by GitHub_M
CVE-2020-11023Potential XSS vulnerability in jQuery
Medium 6.9 Exploited
In plain English
A medium-severity cross-site scripting in jQuery from jquery. Attackers are actively exploiting it in the wild (listed by CISA on January 23, 2025). The chance it is exploited in the next 30 days is estimated at 84.9% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)6.9Medium
Exploit odds (30 days)84.9%top 0.3% of all CVEs
Exploited in the wildYesCISA KEV since Jan 23, 2025
Attack tooling1Public PoC
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Feb 13, 2025.
Official description
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bind-dyndb-ldap | 11.6-2.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | cpp | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | cpp | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | custodia | 0.6.0-3.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | custodia | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | doxygen | 1:1.8.14-13.el8_10 | ALSA-2025:1314 |
| AlmaLinux:9 | doxygen | 1:1.9.1-12.el9_5 | ALSA-2025:1329 |
| AlmaLinux:8 | doxygen-doxywizard | 1:1.8.14-13.el8_10 | ALSA-2025:1314 |
| AlmaLinux:9 | doxygen-doxywizard | 1:1.9.1-12.el9_5 | ALSA-2025:1329 |
| AlmaLinux:8 | doxygen-latex | 1:1.8.14-13.el8_10 | ALSA-2025:1314 |
| AlmaLinux:9 | doxygen-latex | 1:1.9.1-12.el9_5 | ALSA-2025:1329 |
| AlmaLinux:8 | gcc | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | gcc | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | gcc-c++ | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | gcc-c++ | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | gcc-gdb-plugin | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:8 | gcc-gfortran | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | gcc-gfortran | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | gcc-offload-nvptx | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | gcc-offload-nvptx | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | gcc-plugin-annobin | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | gcc-plugin-annobin | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | gcc-plugin-devel | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | gcc-plugin-devel | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | gcc-toolset-13-gcc | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-gcc | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-gcc-c++ | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-gcc-c++ | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-gcc-gfortran | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-gcc-gfortran | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-gcc-plugin-annobin | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-gcc-plugin-annobin | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-gcc-plugin-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-gcc-plugin-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libasan-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libasan-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libatomic-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libatomic-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libgccjit | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libgccjit | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libgccjit-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libgccjit-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libitm-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libitm-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-liblsan-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-liblsan-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libquadmath-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libquadmath-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libstdc++-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libstdc++-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libstdc++-docs | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libstdc++-docs | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libtsan-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libtsan-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-libubsan-devel | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-libubsan-devel | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-13-offload-nvptx | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | gcc-toolset-13-offload-nvptx | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | gcc-toolset-14-gcc | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-gcc | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-gcc-c++ | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-gcc-c++ | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-gcc-gfortran | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-gcc-gfortran | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-gcc-plugin-annobin | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-gcc-plugin-annobin | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-gcc-plugin-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-gcc-plugin-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libasan-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libasan-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libatomic-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libatomic-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libgccjit | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libgccjit | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libgccjit-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libgccjit-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libitm-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libitm-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-liblsan-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-liblsan-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libquadmath-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libquadmath-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libstdc++-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libstdc++-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libstdc++-docs | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libstdc++-docs | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libtsan-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libtsan-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-libubsan-devel | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-libubsan-devel | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | gcc-toolset-14-offload-nvptx | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | gcc-toolset-14-offload-nvptx | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | libasan | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libasan | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libasan8 | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:8 | libasan8 | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:9 | libasan8 | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:9 | libasan8 | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | libatomic | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libatomic | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libatomic-static | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:8 | libgcc | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libgcc | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:9 | libgccjit | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:9 | libgccjit-devel | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libgfortran | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libgfortran | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libgfortran-static | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:8 | libgomp | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libgomp | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libgomp-offload-nvptx | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libgomp-offload-nvptx | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libitm | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libitm | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libitm-devel | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libitm-devel | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | liblsan | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:8 | liblsan | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:8 | liblsan | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | liblsan | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:9 | liblsan | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:9 | liblsan | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:8 | libquadmath | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libquadmath | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libquadmath-devel | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libquadmath-devel | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libquadmath-static | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:8 | libstdc++ | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libstdc++ | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libstdc++-devel | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libstdc++-devel | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libstdc++-docs | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libstdc++-docs | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libstdc++-static | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libstdc++-static | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libtsan | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libtsan | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | libtsan2 | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux:8 | libtsan2 | 13.3.1-2.2.el8_10 | ALSA-2025:1306 |
| AlmaLinux:9 | libtsan2 | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux:9 | libtsan2 | 13.3.1-2.2.el9_5 | ALSA-2025:1309 |
| AlmaLinux:8 | libubsan | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1301 |
| AlmaLinux:9 | libubsan | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346 |
| AlmaLinux:8 | opendnssec | 2.1.7-1.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | opendnssec | 2.1.7-1.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | pcs | 0.10.10-4.el8.alma | ALSA-2021:4142 |
| AlmaLinux:8 | pcs-snmp | 0.10.10-4.el8.alma | ALSA-2021:4142 |
| AlmaLinux:8 | python3-custodia | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-custodia | 0.6.0-3.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-jwcrypto | 0.5.0-1.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-jwcrypto | 0.5.0-1.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-jwcrypto | 0.5.0-1.module_el8.6.0+2737+7e73ea90 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-kdcproxy | 0.4-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-kdcproxy | 0.4-5.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-pyusb | 1.0.0-9.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-pyusb | 1.0.0-9.module_el8.6.0+2737+7e73ea90 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-pyusb | 1.0.0-9.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-qrcode | 5.1-12.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-qrcode | 5.1-12.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-qrcode | 5.1-12.module_el8.6.0+2737+7e73ea90 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-qrcode-core | 5.1-12.module_el8.6.0+2737+7e73ea90 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-qrcode-core | 5.1-12.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-qrcode-core | 5.1-12.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-tbb | 2018.2-10.el8_10.1 | ALSA-2025:1215 |
| AlmaLinux:9 | python3-tbb | 2020.3-8.el9_5.1 | ALSA-2025:1210 |
| AlmaLinux:8 | python3-yubico | 1.3.2-9.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-yubico | 1.3.2-9.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | python3-yubico | 1.3.2-9.module_el8.6.0+2737+7e73ea90 | ALSA-2021:1846 |
| AlmaLinux:8 | softhsm | 2.6.0-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | softhsm | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | softhsm-devel | 2.6.0-5.module_el8.6.0+2881+2f24dc92 | ALSA-2021:1846 |
| AlmaLinux:8 | softhsm-devel | 2.6.0-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux:8 | tbb | 2018.2-10.el8_10.1 | ALSA-2025:1215 |
| AlmaLinux:9 | tbb | 2020.3-8.el9_5.1 | ALSA-2025:1210 |
| AlmaLinux:8 | tbb-devel | 2018.2-10.el8_10.1 | ALSA-2025:1215 |
| AlmaLinux:9 | tbb-devel | 2020.3-8.el9_5.1 | ALSA-2025:1210 |
| AlmaLinux:8 | tbb-doc | 2018.2-10.el8_10.1 | ALSA-2025:1215 |
| AlmaLinux:9 | tbb-doc | 2020.3-8.el9_5.1 | ALSA-2025:1210 |
| Alpine:v3.20 | cacti | 1.2.13-r0 | ALPINE-CVE-2020-11023 |
| Alpine:v3.21 | cacti | 1.2.13-r0 | ALPINE-CVE-2020-11023 |
| Alpine:v3.22 | cacti | 1.2.13-r0 | ALPINE-CVE-2020-11023 |
| Alpine:v3.23 | cacti | 1.2.13-r0 | ALPINE-CVE-2020-11023 |
| Alpine:v3.24 | cacti | 1.2.13-r0 | ALPINE-CVE-2020-11023 |
| Alpine:v3.20 | drupal7 | 7.70-r0 | ALPINE-CVE-2020-11023 |
| Debian:12 | node-jquery | 3.5.0+dfsg-2 | DEBIAN-CVE-2020-11023 |
| Debian:13 | node-jquery | 3.5.0+dfsg-2 | DEBIAN-CVE-2020-11023 |
| Debian:14 | node-jquery | 3.5.0+dfsg-2 | DEBIAN-CVE-2020-11023 |
| Debian:12 | znc | no fix listed | DEBIAN-CVE-2020-11023 |
| Debian:13 | znc | no fix listed | DEBIAN-CVE-2020-11023 |
| Debian:14 | znc | 1.10.3-1 | DEBIAN-CVE-2020-11023 |
| Maven | org.webjars.npm:jquery | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| NuGet | jquery | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| Packagist | components/jquery | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| Rocky Linux:8 | apache-commons-collections | 0:3.2.2-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux:8 | apache-commons-collections | 0:3.2.2-10.module+el8.3.0+74+855e3f5d | RLSA-2020:4847 |
| Rocky Linux:8 | apache-commons-lang | 0:2.6-21.module+el8.3.0+74+855e3f5d | RLSA-2020:4847 |
| Rocky Linux:8 | apache-commons-lang | 0:2.6-21.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux:8 | apache-commons-net | 0:3.6-3.module+el8.3.0+74+855e3f5d | RLSA-2020:4847 |
| Rocky Linux:8 | apache-commons-net | 0:3.6-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux:8 | bea-stax | 0:1.2.0-16.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
Affected products (as reported)
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
References
- DSA-4693 vendor-advisory
- FEDORA-2020-36d2db5f51 vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://jquery.com/upgrade-guide/3.5/
- https://security.netapp.com/advisory/ntap-20200511-0006/
- https://www.drupal.org/sa-core-2020-002
- https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released
- openSUSE-SU-2020:1060 vendor-advisory
- GLSA-202007-03 vendor-advisory
- openSUSE-SU-2020:1106 vendor-advisory
- [hive-issues] 20200813 [jira] [Assigned] (HIVE-24039) update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-dev] 20200813 [jira] [Created] (HIVE-24039) update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200813 [jira] [Updated] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200813 [GitHub] [hive] rajkrrsingh opened a new pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Work started] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Commented] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Assigned] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Comment Edited] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200904 [jira] [Assigned] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200911 [GitHub] [hive] rajkrrsingh closed pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200911 [GitHub] [hive] rajkrrsingh opened a new pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200912 [GitHub] [hive] rajkrrsingh closed pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200912 [GitHub] [hive] rajkrrsingh opened a new pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- FEDORA-2020-fbb94073a1 vendor-advisory
- FEDORA-2020-0b32a59b54 vendor-advisory
- [hive-issues] 20200915 [jira] [Resolved] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-commits] 20200915 [hive] branch master updated: HIVE-24039 : Update jquery version to mitigate CVE-2020-11023 (#1403) mailing-list
- [hive-issues] 20200915 [jira] [Work logged] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200915 [GitHub] [hive] kgyrtkirk merged pull request #1403: HIVE-24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200915 [jira] [Updated] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- FEDORA-2020-fe94df8c34 vendor-advisory
- [nifi-commits] 20200930 svn commit: r1882168 - /nifi/site/trunk/security.html mailing-list
- https://www.oracle.com/security-alerts/cpuoct2020.html
- [flink-issues] 20201105 [jira] [Created] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [flink-dev] 20201105 [jira] [Created] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- openSUSE-SU-2020:1888 vendor-advisory
- [flink-issues] 20201129 [jira] [Commented] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [felix-dev] 20201208 [jira] [Created] (FELIX-6366) 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-dev] 20201208 [jira] [Updated] (FELIX-6366) 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list