CVE-2020-7656

 

Published at: - 19-05-2020 11:15

Last modified: - 25-07-2022 08:15

Total changes: - 2

Description

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

 

Verification logic

 

Reference

• https://snyk.io/vuln/SNYK-JS-JQUERY-569619
• https://security.netapp.com/advisory/ntap-20200528-0001/
• N/A-

 

Keywords

NVD

 

CVE-2020-7656

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures