Homepage

Cross-site Scripting (XSS) The advisory has been revoked - it doesn't affect any version of package pcs-snmp  (opens in a new tab)

Threat Intelligence

EPSS
8.53% (95th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-PCSSNMP-1909686
  • published2 Nov 2021
  • disclosed25 Oct 2021
Report a new vulnerability Found a mistake?

Introduced: 25 Oct 2021

CVE-2021-41183  (opens in a new tab)
CWE-79  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream pcs-snmp package and not the pcs-snmp package as distributed by RHEL.

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various *Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various *Text options are now always treated as pure text, not HTML. A workaround is to not accept the value of the *Text options from untrusted sources.

References