WS-2016-0090 (Medium) detected in jquery-1.10.2.min.js
Closed this issue · 0 comments
mend-for-github-com commented
WS-2016-0090 - Medium Severity Vulnerability
Vulnerable Library - jquery-1.10.2.min.js
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/1.10.2/jquery.min.js
Path to dependency file: /tmp/ws-scm/TIBCO-Messaging/samples/javascript/eftl/shared_durable.html
Path to vulnerable library: /TIBCO-Messaging/samples/javascript/eftl/shared_durable.html
Dependency Hierarchy:
- ❌ jquery-1.10.2.min.js (Vulnerable Library)
Found in HEAD commit: fdf283547f356bd9797d40be7cba306167ca172c
Vulnerability Details
JQuery, before 2.2.0, is vulnerable to Cross-site Scripting (XSS) attacks via text/javascript response with arbitrary code execution.
Publish Date: 2016-11-27
URL: WS-2016-0090
Suggested Fix
Type: Upgrade version
Origin: jquery/jquery@b078a62
Release Date: 2019-04-08
Fix Resolution: 2.2.0