CVE-2012-6662

CWE-79 — Cross-site Scripting (XSS)38 documents7 sources
Severity
4.3MEDIUM
EPSS
7.0%
top 8.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Jqueryui Jquery UIRedhat Enterprise Linux DesktopRedhat Enterprise Linux HPC Node+2 more
Timeline
PublishedNov 24
Latest updateOct 24

Description

Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages10 packages

▶npmjquery-ui< 1.10.0
▶RubyGemsjquery-ui-rails< 4.0.0
▶NuGetjQuery.UI.Combined< 1.10.0
▶Debianjqueryui< 1.10.1+dfsg-1+3

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
jquery-ui Tooltip widget vulnerable to XSS↗2017-10-24
▶
OSV
jquery-ui Tooltip widget vulnerable to XSS↗2017-10-24
▶
OSV
CVE-2012-6662: Cross-site scripting (XSS) vulnerability in the default content option in jquery↗2014-11-24
▶
CVEList
CVE-2012-6662: Cross-site scripting (XSS) vulnerability in the default content option in jquery↗2014-11-24
▶

📋Vendor Advisories

2
Red Hat
jquery-ui: XSS vulnerability in default content in Tooltip widget↗2012-11-27
▶
Debian
CVE-2012-6662: jqueryui - Cross-site scripting (XSS) vulnerability in the default content option in jquery...↗2012
▶

💬Community

31
Bugzilla
CVE-2012-6662 cinnamon: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]↗2014-11-20
▶
Bugzilla
CVE-2012-6662 nodejs-should: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]↗2014-11-20
▶
Bugzilla
CVE-2012-6662 libgda: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]↗2014-11-20
▶
Bugzilla
CVE-2012-6662 drupal7-jquery_update: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]↗2014-11-20
▶
Bugzilla
CVE-2012-6662 ikiwiki: jquery-ui: XSS vulnerability in default content in Tooltip widget [fedora-all]↗2014-11-20
▶