Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2021-9400 1 CVE

Important: bootstrap security update (Oracle Linux 7)

Published Aug 9, 2021 · Updated Aug 9, 2021

Ecosystem: Oracle Linux

Summary

[3.0.0-7.0.1]
- Backport jQuery CVE-2020-11023 fixes from jQuery v3.5.0 to bundled v1.10.2 [Orabug: 33181852]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 bootstrap 0:3.0.0-7.0.1.el7

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025