Tracker / CVE-2019-11358
CVE-2019-11358
Media 6.1
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Prodotti e versioni affette
| backdropcms | backdrop · 1.11.0 → 1.11.9 |
|---|---|
| backdropcms | backdrop · 1.12.0 → 1.12.6 |
| debian | debian_linux |
| drupal | drupal · 7.0 → 7.66 |
| drupal | drupal · 8.5.0 → 8.5.15 |
| drupal | drupal · 8.6.0 → 8.6.15 |
| fedoraproject | fedora |
| joomla | joomla\! · 3.0.0 → 3.9.4 |
| jquery | jquery · … → 3.4.0 |
| juniper | junos |
| netapp | oncommand_system_manager · 3.0 → 3.1.3 |
| netapp | snapcenter |
| opensuse | backports_sle |
| opensuse | leap |
| oracle | agile_product_lifecycle_management_for_process |
| oracle | application_express · … → 19.1 |
| oracle | application_service_level_management |
| oracle | application_testing_suite |
| oracle | banking_digital_experience |
| oracle | banking_enterprise_collections · 2.7.0 → 2.8.0 |
| oracle | banking_platform · 2.4.0 → 2.10.0 |
| oracle | bi_publisher |
| oracle | big_data_discovery |
| oracle | business_process_management_suite |
| oracle | communications_analytics |
| oracle | communications_application_session_controller |
| oracle | communications_billing_and_revenue_management |
| oracle | communications_diameter_signaling_router |
| oracle | communications_eagle_application_processor · 16.1.0 → 16.4.0 |
| oracle | communications_element_manager |
| oracle | communications_interactive_session_recorder · 6.0 → 6.4 |
| oracle | communications_operations_monitor |
| oracle | communications_operations_monitor · 4.1 → 4.3 |
| oracle | communications_services_gatekeeper |
| oracle | communications_session_report_manager |
| oracle | communications_session_route_manager |
| oracle | communications_unified_inventory_management |
| oracle | communications_webrtc_session_controller |
| oracle | diagnostic_assistant |
| oracle | enterprise_manager_ops_center |
| oracle | enterprise_session_border_controller |
| oracle | financial_services_analytical_applications_infrastructure · 7.3.3 → 7.3.5 |
| oracle | financial_services_analytical_applications_infrastructure · 8.0.2 → 8.1.0 |
| oracle | financial_services_analytical_applications_reconciliation_framework |
| oracle | financial_services_analytical_applications_reconciliation_framework · 8.0.4 → 8.0.7 |
| oracle | financial_services_asset_liability_management |
| oracle | financial_services_asset_liability_management · 8.0.4 → 8.0.7 |
| oracle | financial_services_balance_sheet_planning |
| oracle | financial_services_basel_regulatory_capital_basic |
| oracle | financial_services_basel_regulatory_capital_basic · 8.0.4 → 8.0.7 |
| oracle | financial_services_basel_regulatory_capital_internal_ratings_based_approach |
| oracle | financial_services_basel_regulatory_capital_internal_ratings_based_approach · 8.0.4 → 8.0.7 |
| oracle | financial_services_data_foundation · 8.0.4 → 8.0.8 |
| oracle | financial_services_data_governance_for_us_regulatory_reporting · 8.0.6 → 8.0.9 |
| oracle | financial_services_data_integration_hub |
| oracle | financial_services_data_integration_hub · 8.0.5 → 8.0.7 |
| oracle | financial_services_enterprise_financial_performance_analytics |
| oracle | financial_services_funds_transfer_pricing |
| oracle | financial_services_funds_transfer_pricing · 8.0.4 → 8.0.7 |
| oracle | financial_services_hedge_management_and_ifrs_valuations |
Analisi
Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.