PT-2020-21276 · Jquery · Jquery-Mobile
Published
2020-09-02
·
Updated
2020-09-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
jquery-mobile versions (affected versions not specified)
Description
The issue concerns a Cross-Site Scripting problem. It arises because the package checks the
location.hash for content and, upon finding a URL, performs an XmlHttpRequest to the URL. The response is then rendered using innerHTML without properly validating the Content-Type of the response. This allows attackers to inject malicious payloads as part of query parameters, which are then reflected back to the user. For example, a response like {"q":"<iframe/src='javascript:alert(1)'></iframe>","results":[]} would be parsed as HTML, leading to the execution of the JavaScript payload.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jquery-Mobile