CVE-2010-5312

Description

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

5.205

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2010-5312,CVE-2012-6662 are fixed in WebJars - jquery-ui 1.10.0	Windows
Multiple Vulnerabilities are affected in Netapp Snapcenter 2.3	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1	Windows
Vulnerabilities CVE-2010-5312,CVE-2012-6662 are fixed in Ruby-jquery-ui-rails 4.0.0	Windows
Vulnerabilities CVE-2010-5312 are fixed in Nuget - jQuery.UI.Combined 1.10.0	Windows
Vulnerabilities CVE-2010-5312,CVE-2012-6662 are fixed in WebJars - jquery-ui for Linux 1.10.0	Linux
Vulnerabilities CVE-2010-5312,CVE-2012-6662 are fixed in Ruby-jquery-ui-rails for Linux 4.0.0	Linux
Vulnerabilities CVE-2010-5312 are fixed in Nuget - jQuery.UI.Combined for Linux 1.10.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234