Red Hat Security Advisory: python-XStatic-jquery-ui security update

Fixed packages 1

Vulnerabilities 1

• Medium 6.1
  CVE-2016-7103 EPSS 29%

  jQuery-UI vulnerable to Cross-site Scripting in dialog closeText

  Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

  drupal7 org.webjars.npm:jquery-ui jqueryui jquery-ui Debian Ubuntu Alpine npm Maven NuGet RubyGems
  Mar 15, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#low
• article
  https://nodesecurity.io/advisories/127
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1360286
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2933.json
• report
  https://access.redhat.com/security/cve/CVE-2016-7103
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-7103
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-7103