Описание
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 3.1.1-2 |
| bionic | not-affected | |
| cosmic | not-affected | |
| devel | not-affected | |
| disco | not-affected | |
| eoan | not-affected | |
| esm-infra-legacy/trusty | ignored | |
| esm-infra-legacy/xenial | ignored | |
| esm-infra/bionic | not-affected | |
| esm-infra/focal | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | code not present |
| esm-apps-legacy/xenial | not-affected | jQuery 1.9.1 vendored, no cross-domain ajax call |
| esm-apps/bionic | not-affected | jQuery 1.9.1 vendored, no cross-domain ajax call |
| esm-apps/focal | not-affected | jQuery 1.9.1 vendored, no cross-domain ajax call |
| esm-apps/jammy | not-affected | jQuery 3.6.0 vendored, fixed upstream |
| jammy | not-affected | jQuery 3.6.0 vendored, fixed upstream |
| noble | not-affected | code not present |
| resolute | not-affected | code not present |
| upstream | not-affected | no cross-domain ajax call in pcsd's own JS |
Показывать по
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attack ...
4.3 Medium
CVSS2
6.1 Medium
CVSS3