Skip to content
Fencer Intel
medium 6.1

CVE-2012-6708 json

Cross-Site Scripting in jquery

published 2018-01-18 8 y ago modified 2026-06-16 4 mo ago also GHSA-2pqj-h3vj-pqgw , EUVD-2020-0684

cvss
6.1
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
8.6%
EPSS 8.6% chance of exploitation in 30 days, percentile 95%
public exploits
1
Exploit-DB

Summary

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

Patch / fix

  • npm jquery 1.9.0
  • maven org.webjars.npm:jquery 1.9.0
  • nuget jQuery 1.9.0
  • rubygems jquery-rails 2.2.0
  • jquery jquery 1.9.0
  • jquery Ubuntu Pro 14.04 LTS 1.7.2+dfsg-2ubuntu1+esm1

ubuntu advisories UBUNTU-CVE-2012-6708

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • ruby2.5 SLES for SAP 15, SLES 15-LTSS, SLE Module for Basesystem 15 SP1 +2 more 2.5.7-4.8.1

suse advisories SUSE-SU-2020:0737-1

  • ruby2.5 openSUSE Leap 15.1 2.5.7-lp151.4.6.1

opensuse advisories openSUSE-SU-2020:0395-1

  • ruby Alpine 3.10 2.5.6-r0

alpine advisories ALPINE-CVE-2012-6708

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • ceph Azure Linux 3.0 18.2.2-1
  • python-blinker Azure Linux 3.0 1.7.0-4

azure linux advisories AZL-40951AZL-44937

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

  • ruby-rdoc Arch Linux 6.1.2-1

arch linux advisories AVG-1041

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2012-6708 updated cvss 6.8

js-jquery: XSS via improper selector detection

  • Red Hat 3scale API Management Platform 2 jquery
    affected: no fix available “Fix deferred”
  • Red Hat Enterprise Linux 6 pcp, pcp-gui, pcp-conf, pcp-libs, pcp-webjs, pcp-webapi, +73 more
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux 7 pcp, pcp-gui, pcp-conf, pcp-libs, publican, pcp-webjs, +93 more
    affected: no fix available, no fix planned “Will not fix”
  • Red Hat Process Automation 7 js-jquery js-jquery
    affected: no fix planned “Out of support scope”
  • Red Hat Satellite 6 ruby193-rubygem-jquery-ui-rails Red Hat Software Collections python27-python-coverage, python27-python-werkzeug, rh-ror42-rubygem-simplecov-html Red Hat Subscription Asset Manager katello-headpin, ruby193-rubygem-apipie-rails, ruby193-rubygem-jquery-rails, ruby193-rubygemrui_alchemy-rails
    affected: no fix planned “Will not fix”
  • Red Hat CloudForms Management Engine 5 cfme-gemset Red Hat Enterprise Linux 6 ipa, ipa-client, ipa-python, ipa-server, ipa-admintools, ipa-server-selinux, +1 more Red Hat Enterprise Linux 7 ipa, pki-ca, ipsilon, pki-kra, pki-base, pki-core, +29 more Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) python-XStatic-jQuery Red Hat JBoss Fuse Integration Service 2 jquery Red Hat Mobile Application Platform 4 millicore
    +7 more products
    Red Hat OpenStack Platform 9 (Mitaka) python-XStatic-jQuery Red Hat OpenStack Platform 10 (Newton) python-XStatic-jQuery Red Hat OpenStack Platform 11 (Ocata) python-XStatic-jQuery Red Hat OpenStack Platform 12 (Pike) python-XStatic-jQuery Red Hat OpenStack Platform 13 (Queens) python-XStatic-jQuery Red Hat Satellite 6 tfm-rubygem-jquery-ui-rails Red Hat Software Collections rh-python35-python-coverage, rh-python36-python-coverage, rh-ror42-rubygem-jquery-rails, rh-ror50-rubygem-jquery-rails
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-22-097-01 updated cvss 6.1

Pepperl+Fuchs WirelessHART-Gateway

  • Pepperl+Fuchs WHA-GW-F2D2-0-AS- Z2-ETH 3.0.7, 3.0.8, 3.0.9 Pepperl+Fuchs WHA-GW-F2D2-0-AS- Z2-ETH.EIP 3.0.7, 3.0.8, 3.0.9
    affected: mitigation “Minimize network exposure for affected products and ensure they are not accessible via the Internet.” cert.vde.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (EDB-49708)

Exploit prediction

8.63% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-49708 Linksys EA7500 2.0.8.194281 - Cross-Site Scripting webapps, 2021-03-25
  • bugs.jquery.com https://bugs.jquery.com/ticket/11290 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.0 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N
GitHub 3.0 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected packages

ecosystem package affected fixed in
npm jquery
<1.9.0
1.9.0
maven org.webjars.npm:jquery
<1.9.0
1.9.0
nuget jQuery
<1.9.0
1.9.0
rubygems jquery-rails
<2.2.0
2.2.0

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation
  • CWE-64 Windows Shortcut Following (.LNK)

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.