Skip to content
OpenAdvisories
Medium 1 exploited CVE ELSA-2025-1255 1 CVE

Moderate: doxygen security update (Oracle Linux 7)

Published Feb 28, 2025 · Updated Feb 28, 2025

Ecosystem: Oracle Linux

Summary

[1:1.8.5-4.0.1]
- Fix CVE-2020-11022 and CVE-2022-11023 in vendored jQuery [Orabug: 37577394]

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 doxygen 1:1.8.5-4.0.1.el7
Oracle Linux · 7 doxygen-doxywizard 1:1.8.5-4.0.1.el7
Oracle Linux · 7 doxygen-latex 1:1.8.5-4.0.1.el7

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025