This repository was archived by the owner on Oct 21, 2022. It is now read-only.
WS-2016-0090 (Medium) detected in jquery-1.7.1.min.js #21
Description
WS-2016-0090 - Medium Severity Vulnerability
Vulnerable Library - jquery-1.7.1.min.js
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/1.7.1/jquery.min.js
Path to dependency file: /tmp/ws-scm/docs.lighttable.com/_layouts/default.html
Path to vulnerable library: /docs.lighttable.com/_layouts/default.html
Dependency Hierarchy:
- ❌ jquery-1.7.1.min.js (Vulnerable Library)
Found in HEAD commit: 2ce9ccee8d42894d7444c1701320a1bacb77e6b1
Vulnerability Details
JQuery, before 2.2.0, is vulnerable to Cross-site Scripting (XSS) attacks via text/javascript response with arbitrary code execution.
Publish Date: 2016-11-27
URL: WS-2016-0090
CVSS 2 Score Details (4.3)
Base Score Metrics not available
Suggested Fix
Type: Upgrade version
Origin: jquery/jquery@b078a62
Release Date: 2019-04-08
Fix Resolution: 2.2.0
Step up your Open Source Security Game with WhiteSource here