RubyGems/jquery-ui-rails CVE-2012-6662: medium, EPSS 7.47%

jquery-ui Tooltip widget vulnerable to XSS

Action: Upgrade jquery-ui-rails to 4.0.0 or later.

bundle update jquery-ui-rails

Affected

Fixed versions

Sources

• osv: GHSA-qqxp-xp9v-vvx6#RubyGems/jquery-ui-rails
• https://nvd.nist.gov/vuln/detail/CVE-2012-6662
• https://github.com/jquery/jquery/issues/2432
• https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e
• https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98697
• https://github.com/jquery/jquery
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-ui-rails/CVE-2012-6662.yml
• http://bugs.jqueryui.com/ticket/8859
• http://bugs.jqueryui.com/ticket/8861
• http://rhn.redhat.com/errata/RHSA-2015-0442.html
• http://rhn.redhat.com/errata/RHSA-2015-1462.html
• http://seclists.org/oss-sec/2014/q4/613
• http://seclists.org/oss-sec/2014/q4/616

CVE-2012-6662 · published 2017-10-24T18:33:37Z · modified 2025-04-14T22:25:51.702749Z · JSON