Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security report jQuery@1.11.1 #1874

Closed
jurjendevries opened this issue Apr 5, 2021 · 2 comments
Closed

Security report jQuery@1.11.1 #1874

jurjendevries opened this issue Apr 5, 2021 · 2 comments
Labels
invalid wontfix

Comments

@jurjendevries
Copy link

Ossn version: 5.6 paid
PHP version: 7.4
Error message: None
Error Log: n/a
Issue screenshots: n/a
Cache: enabled

jQuery@1.11.1 which is part of OSSN 5.6 is having a Cross-site scripting (XSS) security report https://www.cvedetails.com/cve/CVE-2019-11358/
My suggestion would be to update jQuery to the latest version.
@lianglee
Copy link
Member

lianglee commented Apr 5, 2021

Yesterday I have moved to Jquery 2.2.4 87114ec

However its XSS vulnerability/bug have no effect on OSSN, we don't store same data supplied by any input it is sanitized before going into the system.

@lianglee lianglee closed this as completed Apr 5, 2021
This was referenced Apr 5, 2021
Closed
Closed
@lianglee
Copy link
Member

lianglee commented Apr 5, 2021 •
edited
Loading

Besides that UI is updated to 1.12.1 87114ec

lianglee added a commit that referenced this issue Apr 9, 2021
@lianglee
Move to JQuery 3.x #1874
2cbd217
lianglee added a commit that referenced this issue Apr 9, 2021
@lianglee
Move to JQuery 3.x #1874
b737b40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
invalid wontfix
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jurjendevries @lianglee