Описание
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| datatables.js | fixed | 1.10.21+dfsg-3 | package | |
| datatables.js | fixed | 1.10.21+dfsg-2+deb11u1 | bullseye | package |
| datatables.js | no-dsa | stretch | package |
Примечания
https://github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b (v1.11.3)
Связанные уязвимости
CVSS3: 6.1
ubuntu
около 5 лет назад
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
CVSS3: 6.1
redhat
около 5 лет назад
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
CVSS3: 6.1
nvd
около 5 лет назад
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
