jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
History
21 Nov 2024, 04:20
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html - Mailing List, Third Party Advisory | |
References | () http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html - Mailing List, Third Party Advisory | |
References | () http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html - Third Party Advisory, VDB Entry | |
References | () http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html - Third Party Advisory, VDB Entry | |
References | () http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html - Third Party Advisory, VDB Entry | |
References | () http://seclists.org/fulldisclosure/2019/May/10Â - Mailing List, Third Party Advisory | |
References | () http://seclists.org/fulldisclosure/2019/May/11Â - Mailing List, Patch, Third Party Advisory | |
References | () http://seclists.org/fulldisclosure/2019/May/13Â - Mailing List, Patch, Third Party Advisory | |
References | () http://www.openwall.com/lists/oss-security/2019/06/03/2Â - Mailing List, Patch, Third Party Advisory | |
References | () http://www.securityfocus.com/bid/108023Â - Broken Link, Third Party Advisory, VDB Entry | |
References | () https://access.redhat.com/errata/RHBA-2019:1570Â - Third Party Advisory | |
References | () https://access.redhat.com/errata/RHSA-2019:1456Â - Third Party Advisory | |
References | () https://access.redhat.com/errata/RHSA-2019:2587Â - Third Party Advisory | |
References | () https://access.redhat.com/errata/RHSA-2019:3023Â - Third Party Advisory | |
References | () https://access.redhat.com/errata/RHSA-2019:3024Â - Third Party Advisory | |
References | () https://backdropcms.org/security/backdrop-sa-core-2019-009Â - Third Party Advisory | |
References | () https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/Â - Release Notes, Vendor Advisory | |
References | () https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b - Patch, Third Party Advisory | |
References | () https://github.com/jquery/jquery/pull/4333Â - Patch, Third Party Advisory | |
References | () https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601Â - Third Party Advisory | |
References | () https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html - Mailing List, Third Party Advisory | |
References | () https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html - Mailing List, Third Party Advisory | |
References | () https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html - Mailing List, Third Party Advisory | |
References | () https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/Â - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/Â - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/Â - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/Â - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/Â - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/Â - Mailing List, Third Party Advisory | |
References | () https://seclists.org/bugtraq/2019/Apr/32Â - Mailing List, Third Party Advisory | |
References | () https://seclists.org/bugtraq/2019/Jun/12Â - Issue Tracking, Mailing List, Third Party Advisory | |
References | () https://seclists.org/bugtraq/2019/May/18Â - Mailing List, Patch, Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20190919-0001/Â - Third Party Advisory | |
References | () https://snyk.io/vuln/SNYK-JS-JQUERY-174006Â - Exploit, Third Party Advisory | |
References | () https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1Â - Third Party Advisory | |
References | () https://www.debian.org/security/2019/dsa-4434Â - Third Party Advisory | |
References | () https://www.debian.org/security/2019/dsa-4460Â - Third Party Advisory | |
References | () https://www.drupal.org/sa-core-2019-006Â - Patch, Third Party Advisory | |
References | () https://www.oracle.com//security-alerts/cpujul2021.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuApr2021.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuapr2020.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2020.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2021.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujan2022.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpujul2020.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuoct2020.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - Patch, Third Party Advisory | |
References | () https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - Patch, Third Party Advisory | |
References | () https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/Â - Patch, Third Party Advisory | |
References | () https://www.synology.com/security/advisory/Synology_SA_19_19Â - Third Party Advisory | |
References | () https://www.tenable.com/security/tns-2019-08Â - Third Party Advisory | |
References | () https://www.tenable.com/security/tns-2020-02Â - Third Party Advisory |
16 Feb 2024, 16:32
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/Â - Mailing List, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/Â - Mailing List, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | (MISC) https://snyk.io/vuln/SNYK-JS-JQUERY-174006Â - Exploit, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | (MISC) https://www.oracle.com/security-alerts/cpujan2020.html - Patch, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/Â - Mailing List, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/Â - Mailing List, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/Â - Mailing List, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html - Mailing List, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3EÂ - Issue Tracking | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/Â - Mailing List, Third Party Advisory | |
References | () https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3EÂ - Issue Tracking |
07 Nov 2023, 03:02
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
31 Aug 2023, 03:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
22 Jun 2023, 19:50
Type | Values Removed | Values Added |
---|---|---|
First Time |
Juniper
Juniper junos |
|
CPE | cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:* | |
References | (BID) http://www.securityfocus.com/bid/108023Â - Broken Link, Third Party Advisory, VDB Entry | |
References | (MISC) https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1Â - Third Party Advisory |
13 Jun 2023, 21:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2019-04-20 00:29
Updated : 2024-11-21 04:20
NVD link : CVE-2019-11358
Mitre link : CVE-2019-11358
CVE.ORG link : CVE-2019-11358
JSON object : View
Products Affected
oracle
- financial_services_analytical_applications_infrastructure
- system_utilities
- insurance_ifrs_17_analyzer
- peoplesoft_enterprise_peopletools
- banking_platform
- policy_automation_connector_for_siebel
- communications_session_route_manager
- healthcare_foundation
- communications_analytics
- hospitality_simphony
- agile_product_lifecycle_management_for_process
- healthcare_translational_research
- policy_automation_for_mobile_devices
- insurance_insbridge_rating_and_underwriting
- financial_services_price_creation_and_discovery
- financial_services_analytical_applications_reconciliation_framework
- insurance_allocation_manager_for_enterprise_profitability
- banking_digital_experience
- hospitality_guest_access
- jd_edwards_enterpriseone_tools
- insurance_accounting_analyzer
- retail_customer_management_and_segmentation_foundation
- primavera_gateway
- financial_services_enterprise_financial_performance_analytics
- banking_enterprise_collections
- identity_manager
- communications_eagle_application_processor
- primavera_unifier
- fusion_middleware_mapviewer
- communications_element_manager
- financial_services_retail_customer_analytics
- application_express
- application_testing_suite
- financial_services_basel_regulatory_capital_internal_ratings_based_approach
- communications_operations_monitor
- financial_services_regulatory_reporting_for_de_nederlandsche_bank
- communications_session_report_manager
- financial_services_funds_transfer_pricing
- storagetek_tape_analytics_sw_tool
- financial_services_market_risk_measurement_and_management
- diagnostic_assistant
- insurance_data_foundation
- big_data_discovery
- tape_library_acsls
- communications_diameter_signaling_router
- financial_services_revenue_management_and_billing
- retail_customer_insights
- hospitality_materials_control
- financial_services_institutional_performance_analytics
- financial_services_asset_liability_management
- bi_publisher
- enterprise_session_border_controller
- financial_services_data_integration_hub
- communications_billing_and_revenue_management
- jdeveloper
- financial_services_profitability_management
- jdeveloper_and_adf
- communications_application_session_controller
- financial_services_retail_performance_analytics
- financial_services_liquidity_risk_measurement_and_management
- financial_services_loan_loss_forecasting_and_provisioning
- siebel_ui_framework
- insurance_performance_insight
- communications_interactive_session_recorder
- financial_services_data_foundation
- communications_webrtc_session_controller
- enterprise_manager_ops_center
- business_process_management_suite
- utilities_mobile_workforce_management
- policy_automation
- retail_returns_management
- communications_services_gatekeeper
- financial_services_basel_regulatory_capital_basic
- service_bus
- transportation_management
- retail_point-of-service
- rest_data_services
- financial_services_regulatory_reporting_for_european_banking_authority
- siebel_mobile_applications
- knowledge
- weblogic_server
- financial_services_regulatory_reporting_for_us_federal_reserve
- retail_back_office
- financial_services_balance_sheet_planning
- application_service_level_management
- retail_central_office
- real-time_scheduler
- financial_services_data_governance_for_us_regulatory_reporting
- financial_services_hedge_management_and_ifrs_valuations
- financial_services_liquidity_risk_management
- webcenter_sites
- communications_unified_inventory_management
netapp
- oncommand_system_manager
- snapcenter
opensuse
- leap
- backports_sle
redhat
- cloudforms
- virtualization_manager
jquery
- jquery
juniper
- junos
fedoraproject
- fedora
joomla
- joomla\!
drupal
- drupal
backdropcms
- backdrop
debian
- debian_linux
CWE
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')