Reflected Cross-Site Scripting in jquery.terminal

MITTELGHSA-2hwp-g4g7-mwwj · Published 29/05/2019 · updated 31/08/2020

Kurz gesagt

GHSA-2hwp-g4g7-mwwj ist eine Schwachstelle (MITTEL) in jquery.terminal.
Abhilfe: auf 1.21.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
jquery.terminal npm	`< 1.21.0`	`1.21.0`

Description

Versions of jquery.terminal prior to 1.21.0 are vulnerable to Reflected Cross-Site Scripting. If the application has either of the options anyLinks or invokeMethods set to true, the application may execute arbitrary JavaScript through crafted malicious payloads due to insufficient sanitization.

Recommendation

Upgrade to version 1.21.0 or later

References

jcubic/jquery.terminal commit c8b7727 · WEB
npmjs.com/advisories/769 · WEB

Weitere Schwachstellen in jquery.terminal

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free