freeipa

#8325 [WebUI] Fix htmlPrefilter issue in jQuery
Closed: fixed by frenaud. Opened by stsymbal.

Closed: fixed
Reopen Issue

Details: https://github.com/jquery/jquery/pull/4642

master:

  • bc9f3e0557c6a0a5901fff956f9cb1362085375f WebUI: Apply jQuery patch to fix htmlPrefilter issue

ipa-4-8:

  • 062022996d6efeef3c0a9d5d0611890bdf416e28 WebUI: Apply jQuery patch to fix htmlPrefilter issue

ipa-4-6:

  • 22e24dbfe031c8f7395298cce2dfc52d7a3e040a WebUI: Apply jQuery patch to fix htmlPrefilter issue

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @abbra:
- Custom field changelog adjusted to CVE-2020-11022: In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. FreeIPA is not allowing to pass arbitrary code into affected jQuery path but we applied jQuery fix anyway.
Metadata

webui

None
None
None
CVE-2020-11022: In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. FreeIPA is not allowing to pass arbitrary code into affected jQuery path but we applied jQuery fix anyway.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.