Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2022:7343 3 CVEs

Red Hat Security Advisory: pcs security update

Published Sep 18, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server pcs 0:0.9.169-3.el7_9.3
Red Hat · RHEL 7 enterprise_linux:7::server pcs-debuginfo 0:0.9.169-3.el7_9.3
Red Hat · RHEL 7 enterprise_linux:7::server pcs-snmp 0:0.9.169-3.el7_9.3

Vulnerabilities 3

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025
  • Critical 10.0
    CVE-2022-30123

    Possible shell escape sequence injection vulnerability in Rack

    A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2019-11358 Public exploit EPSS 87%

    XSS in jQuery as used in Drupal, Backdrop CMS, and other products

    jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

    mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1701972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2099524
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7343.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-11358
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-11358
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-11358
  • article
    https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/
  • article
    https://www.drupal.org/sa-core-2019-006
  • report
    https://access.redhat.com/security/cve/CVE-2020-11023
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1850004
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11023
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11023
  • article
    https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2022-30123
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-30123
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-30123
  • advisory
    https://github.com/advisories/GHSA-wq4h-7r42-5hrr