Overview
Original source datajQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.
Affected products and scope
The analysis could not be completed. The original vulnerability data remains available below.
Technical details
The analysis could not be completed. The original vulnerability data remains available below.
Exploitability
The analysis could not be completed. The original vulnerability data remains available below.
Technical impact
The analysis could not be completed. The original vulnerability data remains available below.
Business impact
The analysis could not be completed. The original vulnerability data remains available below.
Remediation
The analysis could not be completed. The original vulnerability data remains available below.
Detection
The analysis could not be completed. The original vulnerability data remains available below.
Sources (80)
mitre (CNA)
lists.apache.org
b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205@<commits.airflow.apache.org>88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7@<commits.airflow.apache.org>5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844@<commits.airflow.apache.org>6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f@<commits.airflow.apache.org>ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6@<commits.roller.apache.org>b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@<dev.drill.apache.org>519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@<dev.drill.apache.org>f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@<issues.drill.apache.org>bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3@<commits.nifi.apache.org>rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b@<commits.nifi.apache.org>r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766@<dev.syncope.apache.org>r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355@<dev.flink.apache.org>rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d@<issues.flink.apache.org>r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9@<issues.flink.apache.org>r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73@<issues.flink.apache.org>r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08@<issues.flink.apache.org>r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa@<issues.flink.apache.org>r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734@<dev.storm.apache.org>
