{"id":"CVE-2024-30875","details":"Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component.","modified":"2024-10-18T22:45:35.372447Z","published":"2024-10-17T22:15:02Z","withdrawn":"2024-10-23T09:49:38.631483Z","references":[{"type":"WEB","url":"https://github.com/Ant1sec-ops/CVE-2024-30875"},{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-30875"}],"affected":[{"package":{"name":"jqueryui","ecosystem":"Debian:11","purl":"pkg:deb/debian/jqueryui?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.1+dfsg-8","1.12.1+dfsg-8+deb11u1","1.12.1+dfsg-8+deb11u2","1.13.0+dfsg-1","1.13.1+dfsg-1","1.13.2+dfsg-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-30875.json"}},{"package":{"name":"jqueryui","ecosystem":"Debian:12","purl":"pkg:deb/debian/jqueryui?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2+dfsg-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-30875.json"}},{"package":{"name":"jqueryui","ecosystem":"Debian:13","purl":"pkg:deb/debian/jqueryui?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2+dfsg-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-30875.json"}}],"schema_version":"1.7.3"}