-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 6.4.3
-
Component/s: Server - Administration
-
7
-
Severity 3 - Minor
-
2
Good morning.
It has been brought to my attention that jQuery library has a vulnerability.
In jQuery version before 1.9.0b1 selector interpreted as HTML. This could lead to potential vulnerabilities (https://bugs.jquery.com/ticket/11290).
Solution: jQuery version 1.9.0b1 has been released to address the issue. Please refer to vendor documentation (https://blog.jquery.com/) for the latest security updates.
Confluence Server is using: jquery-1.7.2.1-confluence-custom-m03.jar
Is this vulnerability currently in the jquery library for confluence?
- depends on
-
CONFSERVER-58213 Upgrade to jQuery 2
- Closed
- relates to
-
- Closed
- mentioned in
-
Page Loading...