GitHub Advisoryadvisory · npm, RubyGems, NuGet, PyPI, Maven, Packagist

GHSA-6c3j-c64m-qhgq XSS in jQuery as used in Drupal, Backdrop CMS, and other products

MEDIUM Published 2019-04-26 Modified 2024-11-05 Official page ↗
Aliases
CVE-2019-11358
Ecosystem
npm, RubyGems, NuGet, PyPI, Maven, Packagist
Packages
jquery, jquery-rails, jQuery, django, org.webjars.npm:jquery, maximebf/debugbar
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-1321, CWE-79
Reviewed
2019-04-26

Affected packages

• npm jquery: >= 1.1.4, < 3.4.0 → fixed in 3.4.0 • RubyGems jquery-rails: < 4.3.4 → fixed in 4.3.4 • NuGet jQuery: >= 1.1.4, < 3.4.0 → fixed in 3.4.0 • PyPI django: >= 2.0a1, < 2.1.9 → fixed in 2.1.9 • PyPI django: >= 2.2a1, < 2.2.2 → fixed in 2.2.2 • Maven org.webjars.npm:jquery: >= 1.1.4, < 3.4.0 → fixed in 3.4.0 • Packagist maximebf/debugbar: < 1.19.0 → fixed in 1.19.0

Description

jQuery from 1.1.4 until 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles `jQuery.extend(true, {}, ...)` because of `Object.prototype` pollution. If an unsanitized source object contained an enumerable `__proto__` property, it could extend the native `Object.prototype`.

Related

Alias · CVE (1)

  • CVE-2019-11358 jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of… vulnerability

Weakness · CWE (2)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References