Description
jQuery from 1.1.4 until 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Recommendation
Update the jquery package to the latest compatible version. Followings are version details:
- Affected version(s): >= 1.1.4, < 3.4.0
- Patched version(s): 3.4.0
References
- GHSA-6c3j-c64m-qhgq
- backdropcms.org
- snyk.io
- www.drupal.org
- access.redhat.com
- lists.apache.org
- lists.debian.org
- www.debian.org
- www.synology.com
- www.tenable.com
- lists.opensuse.org
- packetstormsecurity.com
- www.openwall.com
- kb.pulsesecure.net
- security.snyk.io
- seclists.org
- www.oracle.com
- supportportal.juniper.net
- web.archive.org
- www.securityfocus.com
- blog.jquery.com
- lists.fedoraproject.org
- security.netapp.com
- www.djangoproject.com
- www.privacy-wise.com
- CVE-2019-11358
- CWE-1321
- CWE-79
- CAPEC-310
- OWASP 2021-A3
- OWASP 2021-A6
Could your website be exposed too?
SmartScanner can check your website for XSS in jQuery as used in Drupal, Backdrop CMS, and other products and gives you actionable findings to investigate.
Start a free scanRelated Issues
- XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode - CVE-2019-10785
- XSS in the `altField` option of the Datepicker widget in jquery-ui - CVE-2021-41182
- Potential XSS vulnerability in jQuery - jquery - CVE-2020-11022
- auth0-lock vulnerable to XSS via unsanitized placeholder property - CVE-2019-20174
You might also like:
See something that needs correcting? Let us knowUpdated November 05, 2024