Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-19228

Upgrade to JQuery 3.x

    XMLWordPrintable

Details

    • Task
    • Resolution: Duplicate
    • Major
    • None
    • 13.10
    • Dependency Upgrades
    • Unknown

    Description

      Update the library to improve security: XWiki 13.10 is using jquery 2.x which is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed, see https://nvd.nist.gov/vuln/detail/CVE-2015-9251

      Attachments

        Issue Links

          duplicates

          Task - A task that needs to be done. XWIKI-14928 Upgrade to jQuery 3.6.0

          • Major - Major loss of function.
          • Closed
          mentioned in

          Page Loading...

          Activity

            People

              mflorea Marius Dumitru Florea
              oana.tabaranu Elena-Oana Florea
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: