|
|
| |
|
| |
jquery: cross-site scripting
| Package(s): | jquery |
CVE #(s): | CVE-2011-4969
|
| Created: | February 14, 2013 |
Updated: | March 13, 2013 |
| Description: |
From the Ubuntu advisory:
It was discovered that jQuery incorrectly handled selecting elements using
location.hash, resulting in a possible cross-site scripting (XSS) issue.
With cross-site scripting vulnerabilities, if a user were tricked into
viewing a specially crafted page, a remote attacker could exploit this to
modify the contents, or steal confidential data, within the same domain.
|
| Alerts: |
|
( Log in to post comments)
|
|
|