Lucene search

K

GoogleOSV:CVE-2020-7656

HistoryMay 19, 2020 - 9:15 p.m.

CVE-2020-7656

2020-05-1921:15:10

Google

osv.dev

14

0.002 Low

EPSS

Percentile

52.0%

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove “<script>” HTML tags that contain a whitespace character, i.e: “</script >”, which results in the enclosed script logic to be executed.

References

security.netapp.com/advisory/ntap-20200528-0001/

snyk.io/vuln/SNYK-JS-JQUERY-569619

supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US

www.oracle.com/security-alerts/cpujul2022.html

0.002 Low

EPSS

Percentile

52.0%

Related for OSV:CVE-2020-7656

cve1 ibm20 nodejs1 cvelist1 ubuntucve1 openvas2 githubexploit1 nvd1 veracode1 osv3 debiancve1 redhatcve1 prion1 github1 nessus10 oraclelinux1 almalinux1 redhat2 rocky1 ics1 oracle1