Open blackfalcon opened 1 year ago
A vulnerable version of jQuery is being used in the documentation site. The vulnerabilities include but are not limited to, XSS and DoS attacks. https://github.com/AlaskaAirlines/WebCoreStyleSheets/blob/master/docs/assets/js/vendor/jquery.min.js
More details on the vulnerabilities: https://nvd.nist.gov/vuln/detail/CVE-2016-10707 https://nvd.nist.gov/vuln/detail/CVE-2015-9251
No reproduction behavior.
jQuery is upgraded to at least 3.0, a non-vulnerable version.
Describe the bug
A vulnerable version of jQuery is being used in the documentation site. The vulnerabilities include but are not limited to, XSS and DoS attacks. https://github.com/AlaskaAirlines/WebCoreStyleSheets/blob/master/docs/assets/js/vendor/jquery.min.js
More details on the vulnerabilities: https://nvd.nist.gov/vuln/detail/CVE-2016-10707 https://nvd.nist.gov/vuln/detail/CVE-2015-9251
To Reproduce
No reproduction behavior.
Expected behavior
jQuery is upgraded to at least 3.0, a non-vulnerable version.