RHSA-2020:5412MediumCVSS 6.1
Red Hat Security Advisory: python-XStatic-jQuery224 security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods
🎯 Affected products3
- Red Hat OpenStack Platform 16.1
- python-XStatic-jQuery224-0:2.2.4.1-3.el8ost.src as a component of Red Hat OpenStack Platform 16.1
- python3-XStatic-jQuery224-0:2.2.4.1-3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.