Red Hat Security Advisory: OpenShift Container Platform 3.11 security update

Fixed packages 1

Vulnerabilities 1

• Medium 6.9
  CVE-2020-11022 Public exploit EPSS 99%

  jQuery has a potential XSS vulnerability

  In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…

  jquery jQuery keycloak-26.6-iamguarded-compat drupal7 Debian Ubuntu Alpine Wolfi npm Packagist Maven NuGet RubyGems
  Apr 29, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1828406
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2217.json
• report
  https://access.redhat.com/security/cve/CVE-2020-11022
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-11022
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-11022
• advisory
  https://github.com/advisories/GHSA-gxr4-xjj5-5px2