search

Bangtrongtuyet / phpmyAdmin

GNU General Public License v2.0
0 stars 0 forks source link

CVE-2016-7103 (Medium) detected in jquery-ui-1.11.2 - autoclosed #4

Closed mend-bolt-for-github[bot] closed 2 years ago

mend-bolt-for-github[bot] commented 5 years ago

CVE-2016-7103 - Medium Severity Vulnerability

Vulnerable Library - jquery-ui1.11.2

The official jQuery user interface library.

Library home page: https://github.com/jquery/jquery-ui.git

Found in HEAD commit: fbd634d4c1d668e77ad15cdb38c4a85db5c75002

Library Source Files (37)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

- /phpmyAdmin/js/jquery/src/jquery-ui/effect-bounce.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-explode.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect.js - /phpmyAdmin/js/jquery/src/jquery-ui/widget.js - /phpmyAdmin/js/jquery/src/jquery-ui/menu.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-drop.js - /phpmyAdmin/js/jquery/src/jquery-ui/tabs.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-slide.js - /phpmyAdmin/js/jquery/src/jquery-ui/resizable.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-pulsate.js - /phpmyAdmin/js/jquery/src/jquery-ui/sortable.js - /phpmyAdmin/js/jquery/src/jquery-ui/selectable.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-fade.js - /phpmyAdmin/js/jquery/src/jquery-ui/mouse.js - /phpmyAdmin/js/jquery/src/jquery-ui/button.js - /phpmyAdmin/js/jquery/src/jquery-ui/position.js - /phpmyAdmin/js/jquery/src/jquery-ui/spinner.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-scale.js - /phpmyAdmin/js/jquery/src/jquery-ui/draggable.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-fold.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-puff.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-size.js - /phpmyAdmin/js/jquery/src/jquery-ui/slider.js - /phpmyAdmin/js/jquery/src/jquery-ui/autocomplete.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-blind.js - /phpmyAdmin/js/jquery/src/jquery-ui/accordion.js - /phpmyAdmin/js/jquery/src/jquery-ui/progressbar.js - /phpmyAdmin/js/jquery/src/jquery-ui/selectmenu.js - /phpmyAdmin/js/jquery/src/jquery-ui/droppable.js - /phpmyAdmin/js/jquery/src/jquery-ui/core.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-transfer.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-shake.js - /phpmyAdmin/js/jquery/src/jquery-ui/dialog.js - /phpmyAdmin/js/jquery/src/jquery-ui/tooltip.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-clip.js - /phpmyAdmin/js/jquery/src/jquery-ui/datepicker.js - /phpmyAdmin/js/jquery/src/jquery-ui/effect-highlight.js

Vulnerability Details

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Publish Date: 2017-03-15

URL: CVE-2016-7103

CVSS 3 Score Details (6.1)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Changed - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: Low - Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2016-7103

Release Date: 2017-03-15

Fix Resolution: 1.12.0

Step up your Open Source Security Game with WhiteSource here

mend-bolt-for-github[bot] commented 2 years ago

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.