Open mend-bolt-for-github[bot] opened 3 years ago
:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.
:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.
WS-2014-0029 - Medium Severity Vulnerability
Vulnerable Library - ofbizbeforeSvnRestructuring
Apache OFBiz - Main development has moved to the ofbiz-frameworks repository.
Library home page: https://github.com/apache/ofbiz.git
Found in HEAD commit: 9f6ed39589395d00f1d69228cb50a7987ba11512
Found in base branch: trunk
Vulnerable Source Files (1)
/framework/images/webapp/images/jquery/plugins/jsTree/jquery.jstree-3.0.0-beta3.js
Vulnerability Details
Node text does not escape html in Jstree, This is a potential XSS issue.
Publish Date: 2014-07-16
URL: WS-2014-0029
CVSS 3 Score Details (4.7)
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Changed - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2014-07-16
Fix Resolution: 3.0.3
Step up your Open Source Security Game with Mend here