suse · CVE-2016-7103

Quick triage

Priority: medium 公開: 2021-05-30 13:45:22 UTC Updated: 2024-07-13 01:01:26 UTC

参照: Official suse advisory, NVD, CVE.org · CVE 詳細

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-7103 severity moderate: SUSE including 7 source package names (python-XStatic-jquery-ui-1.11.0.1-2.3.1, python310-XStatic-jquery-ui-1.13.0.1-1.15, …), 7 product×package rows across 2 product lines (SUSE OpenStack Cloud 7, openSUSE Tumbleweed): Fixed 7.

Description:

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

cvelogic Threat Intelligence