CVE-2020-28488 in jquery-ui

Summary

by MITRE • 01/22/2021

This affects all versions of package jquery-ui; all versions of package org.fujion.webjars:jquery-ui.
When the "dialog" is injected into an HTML tag more than once, the browser and the application may crash.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 11/12/2020
• Disclosure: 01/22/2021
• Moderation: revoked
• Entry: VDB-168618
• CPE: ready
• CWE: CWE-74 (confirmed)
• CVSS: 5.0 (NVD)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Finance, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-28488
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-28488
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-28488/