Overview
Original source datajQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Affected products and scope
The analysis could not be completed. The original vulnerability data remains available below.
Technical details
The analysis could not be completed. The original vulnerability data remains available below.
Exploitability
The analysis could not be completed. The original vulnerability data remains available below.
Technical impact
The analysis could not be completed. The original vulnerability data remains available below.
Business impact
The analysis could not be completed. The original vulnerability data remains available below.
Remediation
The analysis could not be completed. The original vulnerability data remains available below.
Detection
The analysis could not be completed. The original vulnerability data remains available below.
Sources (45)
mitre (CNA)
lists.apache.org
10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731@<dev.flink.apache.org>17ff53f7999e74fbe3cc0ceb4e1c3b00b180b7c5afec8e978837bc49@<user.flink.apache.org>52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2@<user.flink.apache.org>ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6@<commits.roller.apache.org>b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@<dev.drill.apache.org>519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@<dev.drill.apache.org>f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@<issues.drill.apache.org>
