THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-41184 (MEDIUM 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option

[NVD] CVE-2021-41184 (MEDIUM 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option

lownvdPublished 2021-10-26

CVE-2021-41184 CVSS: 6.5 MEDIUM Published: 2021-10-26T15:15:10.460

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is t

Indicators of compromise

CVE-2021-41184cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-41184