Bug 906820 (CVE-2011-4969) - CVE-2011-4969 jquery: Cross-site scripting (XSS) via $(location.hash) and $(#<tag>)
Summary: CVE-2011-4969 jquery: Cross-site scripting (XSS) via $(location.hash) and $(#...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: CVE-2011-4969
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 896496 896497 896577 896578 901599 901600
Blocks: 896654
TreeView+ depends on / blocked
 
Reported: 2013-02-01 15:12 UTC by Jan Lieskovsky
Modified: 2022-06-15 01:01 UTC (History)
19 users (show)

Fixed In Version: JQuery 1.6.3
Clone Of:
Environment:
Last Closed: 2013-02-10 06:04:48 UTC
Embargoed:

Attachments (Terms of Use)

Description Jan Lieskovsky 2013-02-01 15:12:18 UTC 
A cross-site scripting (XSS) flaw was found in the way jQuery, a fast, small, and feature-rich JavaScript library, performed sanitization of location.hash and <tag> arguments in certain circumstances. A remote attacker could provide a specially-crafted web page to a web-based application using the jQuery library that, when processed would lead to arbitrary HTML or web script execution in the context of logged-in user session.

Upstream bug report:
[1] http://bugs.jquery.com/ticket/9521

References:
[2] http://blog.jquery.com/2011/09/01/jquery-1-6-3-released/
[3] http://www.openwall.com/lists/oss-security/2013/01/31/3
Comment 1 Jan Lieskovsky 2013-02-01 15:22:52 UTC 
Created drupal7-jquery_update tracking bugs for this issue

Affects: fedora-all [bug 896496]
Affects: epel-all [bug 896497]
Comment 2 Jan Lieskovsky 2013-02-01 15:23:19 UTC 
Created python-tw-jquery tracking bugs for this issue

Affects: fedora-all [bug 896577]
Affects: epel-all [bug 896578]
Comment 3 Jan Lieskovsky 2013-02-01 15:23:47 UTC 
Created python-tw2-jquery tracking bugs for this issue

Affects: fedora-17 [bug 901599]
Affects: epel-6 [bug 901600]
Comment 4 Scott Dodson 2013-02-10 06:04:48 UTC 
All relevant updates have been pushed.
Note You need to log in before you can comment on or make changes to this bug.