Red Hat Security AdvisoryRHSA-2020:5581
python-XStatic-jQuery security update
Released 2020-12-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 13.0 python-XStatic-jQuery-2.2.4.1-3.el7ost
- Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server python-XStatic-jQuery-2.2.4.1-3.el7ost
Fixes 1 record
Priority HIGH 69
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.8682 · Published 2019-04-19 · Partial fix · 3.4.0, 4.3.4 +3 CWE-1321
