CVE-2010-5312: Apache Drill

Medium severity, CVSS 6.1. EPSS: 18.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Affected products

• Apache Drill: version 1.16.0 only
• Debian Debian Linux: version 7.0 only; version 9.0 only
• Drupal Drupal: from 7.0, before 7.86 (fixed in 7.86)
• Fedoraproject Fedora: version 35 only; version 36 only
• Jqueryui jQuery UI: before 1.10.0 (fixed in 1.10.0)
• Netapp Snapcenter: affected versions not specified

Published 2014-11-24. Last modified 2026-06-16.