Podatność CVE-2019-11358

Podatność CVE-2019-11358

Publikacja: 2019-04-19 Modyfikacja: 2019-04-20

Opis:

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
Med.	dotCMS 5.1.1 Vulnerable Dependencies	John Martinelli	11.05.2019
Low	RetireJS CORS Issue / Script Execution	John Martinelli	12.06.2019
Low	OctoberCMS Insecure Dependencies	SECURELI.com	15.03.2020

Typ:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Wymagany dostęp	Złożoność ataku	Autoryzacja
Zdalny	Średnia	Nie wymagana
Wpływ na poufność	Wpływ na integralność	Wpływ na dostępność
Brak	Częściowy	Brak

Affected software
Jquery -> Jquery
Drupal -> Drupal
Debian -> Debian linux

Referencje:

http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html

http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html

http://seclists.org/fulldisclosure/2019/May/10

http://seclists.org/fulldisclosure/2019/May/11

http://seclists.org/fulldisclosure/2019/May/13

http://www.openwall.com/lists/oss-security/2019/06/03/2

http://www.securityfocus.com/bid/108023

https://access.redhat.com/errata/RHSA-2019:1456

https://backdropcms.org/security/backdrop-sa-core-2019-009

https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/

https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b

https://github.com/jquery/jquery/pull/4333

https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc@%3Ccommits.airflow.apache.org%3E

https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844@%3Ccommits.airflow.apache.org%3E

https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f@%3Ccommits.airflow.apache.org%3E

https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7@%3Ccommits.airflow.apache.org%3E

https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205@%3Ccommits.airflow.apache.org%3E

https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html

https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/

https://seclists.org/bugtraq/2019/Apr/32

https://seclists.org/bugtraq/2019/Jun/12

https://seclists.org/bugtraq/2019/May/18

https://snyk.io/vuln/SNYK-JS-JQUERY-174006

https://www.debian.org/security/2019/dsa-4434

https://www.debian.org/security/2019/dsa-4460

https://www.drupal.org/sa-core-2019-006

Podatność CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

Med.

dotCMS 5.1.1 Vulnerable Dependencies

Low

RetireJS CORS Issue / Script Execution

Low

OctoberCMS Insecure Dependencies

CWE-79

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

4.3/10

2.9/10

8.6/10

Zdalny

Średnia

Nie wymagana

Brak

Częściowy

Brak

Affected software

Referencje:

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.