Attacker Value
Unknown
CVE-2021-41183
CVE-2021-41183
(Last updated November 28, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various *Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various *Text options are now always treated as pure text, not HTML. A workaround is to not accept the value of the *Text options from untrusted sources.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
6.1 Medium
Impact Score:
2.7
Exploitability Score:
2.8
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope (S):
Changed
Confidentiality (C):
Low
Integrity (I):
Low
Availability (A):
None
General Information
Vendors
- debian,
- drupal,
- fedoraproject,
- jqueryui,
- netapp,
- oracle,
- tenable
Products
- agile plm 9.3.6,
- application express,
- banking platform 2.12.0,
- banking platform 2.9.0,
- big data spatial and graph,
- big data spatial and graph 23.1,
- communications interactive session recorder 6.4,
- communications operations monitor 4.3,
- communications operations monitor 4.4,
- communications operations monitor 5.0,
- debian linux 9.0,
- drupal,
- fedora 33,
- fedora 34,
- fedora 35,
- fedora 36,
- h300e firmware -,
- h300s firmware -,
- h410c firmware -,
- h410s firmware -,
- h500e firmware -,
- h500s firmware -,
- h700e firmware -,
- h700s firmware -,
- hospitality inventory management 9.1.0,
- hospitality suite8,
- hospitality suite8 8.10.2,
- jd edwards enterpriseone tools,
- jquery ui,
- mysql enterprise monitor,
- peoplesoft enterprise peopletools 8.58,
- peoplesoft enterprise peopletools 8.59,
- policy automation,
- primavera gateway,
- primavera gateway 18.8.0,
- primavera gateway 19.12.0,
- primavera gateway 20.12.0,
- primavera gateway 21.12.0,
- rest data services,
- rest data services 22.1.1,
- tenable.sc,
- weblogic server 12.2.1.3.0,
- weblogic server 12.2.1.4.0,
- weblogic server 14.1.1.0.0
References
Advisory
Miscellaneous
