CVE-2016-7103

Related Files

Ubuntu Security Notice USN-6419-1

Posted Oct 5, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6419-1 - Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary web script or HTML code injection. A remote attacker could possibly use this issue to perform a cross-site scripting attack. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. Esben Sparre Andreasen discovered that jQuery UI did not properly handle values from untrusted sources in the Datepicker widget. A remote attacker could possibly use this issue to perform a cross-site scripting attack and execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

tags | advisory, remote, web, arbitrary, xss

systems | linux, ubuntu

advisories | CVE-2016-7103, CVE-2021-41184, CVE-2022-31160

SHA-256 | 05388b73a403c354a99e6e89119bc4f5977a6dc6cffe23761717eab763f7e15d

Download | Favorite | View

Red Hat Security Advisory 2017-0161-01

Posted Jan 20, 2017

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2017-0161-01 - jQuery UI is a set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript library. Security Fix: It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user.

tags | advisory, javascript, xss

systems | linux, redhat

advisories | CVE-2016-7103

SHA-256 | 228292d261a09c33ba32f657b1b49a99534245f626a3f55a46b5a60eeabc2dbd

Download | Favorite | View

Red Hat Security Advisory 2016-2933

Posted Dec 9, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-2933 - An update for python-XStatic-jquery-ui is now available for Red Hat OpenStack Platform 9.0 (Mitaka). Security Fix: It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user.

tags | advisory, xss, python

systems | linux, redhat

advisories | CVE-2016-7103

SHA-256 | 67077c8cafbfe6072c6edf13c4e21d1b8f5252a6e715bc8616fae7aac5860cdc

Download | Favorite | View

Red Hat Security Advisory 2016-2932-01

Posted Dec 9, 2016

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2016-2932-01 - An update for python-XStatic-jquery-ui is now available for Red Hat OpenStack Platform 8.0 (Liberty). Security Fix: It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user.

tags | advisory, xss, python

systems | linux, redhat

advisories | CVE-2016-7103

SHA-256 | 50b384607295f1379adf0df884f3814ccd83909bfcfe9cab8e226e48245f72a7

Download | Favorite | View