Closed mend-for-github-com[bot] closed 2 years ago
:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.
CVE-2015-9251 - Medium Severity Vulnerability
Vulnerable Library - jquery-1.8.3-2.0.0.min.js
Flat UI Free is a beautiful theme for Bootstrap. We have redesigned many of its components to look flat in every pixel
Library home page: https://cdnjs.cloudflare.com/ajax/libs/flat-ui/2.0.0/js/jquery-1.8.3.min.js
Path to vulnerable library: /taskManager/static/taskManager/js/jquery-1.8.3.min.js
Dependency Hierarchy: - :x: **jquery-1.8.3-2.0.0.min.js** (Vulnerable Library)
Found in HEAD commit: 9c82557a12ed8d1bf704180a7d351aa1518ef16c
Found in base branch: main
Vulnerability Details
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Publish Date: 2018-01-18
URL: CVE-2015-9251
CVSS 3 Score Details (6.1)
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Changed - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: Low - Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2015-9251
Release Date: 2018-01-18
Fix Resolution: jQuery - v3.0.0