Описание
jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| jquery-minicolors | fixed | 2.3.5+dfsg-4 | package | |
| jquery-minicolors | no-dsa | bookworm | package | |
| jquery-minicolors | no-dsa | bullseye | package | |
| jquery-minicolors | no-dsa | buster | package |
Примечания
https://securitylab.github.com/advisories/GHSL-2021-1045_jQuery_MiniColors_Plugin/
https://github.com/claviska/jquery-minicolors/commit/ef134824a7f4110ada53ea6c173111a4fa2f48f3 (2.3.6)
Связанные уязвимости
jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.
jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.
@claviska/jquery-minicolors vulnerable to Cross-site Scripting