PT-2019-17660 · Jquery · Jquery

Publicado 2019-04-22 · Atualizado 2019-04-25 · CVE-2019-5428

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions jquery versions prior to 3.4.0

Description The issue concerns Prototype Pollution, where the extend() method allows an attacker to modify the prototype for Object, causing changes in properties that will exist on all objects.

Recommendations Upgrade to version 3.4.0 or later.

Identificadores relacionados

CVE-2019-5428

GHSA-WV67-Q8RR-GRJP

Produtos afetados

Jquery

Referências · 9

• https://github.com/jquery/jquery/pull/4333 · Nota
• https://blog.jquery.com/2019/04/10/jquery-3-4-0-released · Nota
• https://osv.dev/vulnerability/GHSA-wv67-q8rr-grjp · Aviso do Fabricante
• https://hackerone.com/reports/454365 · Nota
• https://cve.org/CVERecord?id=CVE-2019-5428 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-5428 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5428 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-5428 · Aviso do Fabricante
• https://npmjs.com/advisories/796 · Nota