search

turkdevops / portapps.github.io

🌍 Portapps website
https://portapps.io
MIT License
0 stars 1 forks source link

CVE-2012-2400 (High) detected in swfobject-2.2.js - autoclosed #9

Closed mend-bolt-for-github[bot] closed 2 years ago

mend-bolt-for-github[bot] commented 3 years ago

CVE-2012-2400 - High Severity Vulnerability

Vulnerable Library - swfobject-2.2.js

SWFObject is an easy-to-use and standards-friendly method to embed Flash content, which utilizes one small JavaScript file

Library home page: https://cdnjs.cloudflare.com/ajax/libs/swfobject/2.2/swfobject.js

Path to dependency file: portapps.github.io/node_modules/html5shiv/test/object-test.html

Path to vulnerable library: /node_modules/html5shiv/test/object-test.html

Dependency Hierarchy: - :x: **swfobject-2.2.js** (Vulnerable Library)

Found in HEAD commit: 757e720ebc2acf9aba1a1828a04ffc4a74d7afb8

Found in base branch: dev

Vulnerability Details

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors.

Publish Date: 2012-04-21

URL: CVE-2012-2400

CVSS 2 Score Details (10.0)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2400

Release Date: 2012-04-21

Fix Resolution: 3.3.2

Step up your Open Source Security Game with WhiteSource here

mend-bolt-for-github[bot] commented 2 years ago

:heavy_check_mark: This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.