Project

General

Profile

Actions
Copy link

Bug #17516

closed

Update jquery to 2.2.4 to fix XSS

Added by Daniel Lobato Garcia over 7 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Daniel Lobato Garcia
Category:
Security
Target version:
1.15.0
Difficulty:
Triaged:
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/4065
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Affected versions of the package (< 1.12) are vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain ajax request is performed without the dataType option causing text/javascript responses to be executed.

https://github.com/jquery/jquery/issues/2432 for more information

Related issues 1 (0 open — 1 closed)

Related to Foreman - Bug #17910: unable to click on puppet ca links ClosedSebastian Gräßl01/03/2017Actions
Actions
Copy link
 #1

Updated by Daniel Lobato Garcia over 7 years ago

  • Subject changed from Update jquery to 1.12 to fix CVE to Update jquery to 1.12 to fix XSS
Actions
Copy link
 #2

Updated by The Foreman Bot over 7 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Daniel Lobato Garcia
  • Pull request https://github.com/theforeman/foreman/pull/4065 added
Actions
Copy link
 #3

Updated by Daniel Lobato Garcia over 7 years ago

  • Target version set to 1.4.3
Actions
Copy link
 #4

Updated by Daniel Lobato Garcia over 7 years ago

  • Target version changed from 1.4.3 to 1.15.5
Actions
Copy link
 #5

Updated by Anonymous over 7 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions
Copy link
 #6

Updated by Dominic Cleal over 7 years ago

  • translation missing: en.field_release set to 209
Actions
Copy link
 #7

Updated by Tomer Brisker over 7 years ago

  • Related to Bug #17910: unable to click on puppet ca links added
Actions
Copy link
 #8

Updated by Tomer Brisker over 7 years ago

  • Subject changed from Update jquery to 1.12 to fix XSS to Update jquery to 2.2.4 to fix XSS

updated the subject to match the version that was upgraded to.

Actions
Copy link

Also available in: Atom PDF