VDB
BDU%3A2019-01542
BDU%3A2019-01542
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость функции jQuery.extend() библиотеки jQuery, позволяющая нарушителю вызвать отказ в обслуживании, выполнить произвольный JavaScript-код или повысить свои привилегии
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ООО «РусБИТех-Астра», Red Hat Inc., Сообщество свободного программного обеспечения, Oracle Corp., Fedora Project, The jQuery Foundation, Novell Inc., АО «Концерн ВНИИНС», Moxa Inc. | Astra Linux Special Edition (запись в едином реестре российских программ №369), Red Hat Enterprise Linux, Debian GNU/Linux, WebLogic Server, Enterprise Manager Ops Center, JD Edwards EnterpriseOne Tools, Primavera Unifier, Fedora, PeopleSoft Enterprise PeopleTools, jQuery, OpenSUSE Leap, Communications Billing and Revenue Management, Jboss Fuse, Oracle Hospitality Guest Access, Application Testing Suite, Insurance Performance Insight, Insurance Allocation Manager for Enterprise Profitability, Financial Services Retail Customer Analytics, Financial Services Profitability Management, Financial Services Price Creation and Discovery, Financial Services Institutional Performance Analytics, Financial Services Analytical Applications Infrastructure, Banking Platform, Oracle Policy Automation Connector for Siebel, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), Oracle Communications Unified Inventory Management, Red Hat Single Sign-On, Primavera Gateway, Red Hat Virtualization Engine, Oracle Financial Services Enterprise Financial Performance Analytics, Oracle Financial Services Retail Performance Analytics, Oracle Hospitality Materials Control, Oracle JDeveloper and ADF, Oracle Service Bus, Oracle Healthcare Foundation, Oracle Healthcare Translational Research, Oracle Policy Automation, Oracle Policy Automation for Mobile Devices, Oracle Retail Customer Insights, Siebel Mobile Applications, Oracle Agile Product Lifecycle Management for Process, Diagnostic Assistant, Oracle Financial Services Analytical Applications Reconciliation Framework, Oracle Financial Services Asset Liability Management, Oracle Financial Services Basel Regulatory Capital Basic, Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach, Oracle Financial Services Data Foundation, Oracle Financial Services Data Integration Hub, Financial Services Funds Transfer Pricing, Oracle Financial Services Hedge Management and IFRS Valuations, Oracle Financial Services Liquidity Risk Management, Oracle Financial Services Liquidity Risk Measurement and Management, Oracle Financial Services Loan Loss Forecasting and Provisioning, Oracle Financial Services Market Risk Measurement and Management, Oracle Financial Services Revenue Management and Billing, Oracle Insurance Data Foundation, Oracle Insurance IFRS 17 Analyzer, System Utilities, Oracle Communications Interactive Session Recorder, Tape Library ACSLS, Oracle Real-Time Scheduler, Oracle Utilities Mobile Workforce Management, Oracle Communications Session Route Manager, PeopleSoft Enter |
Timeline
- Apr 23, 2019 CVE Published
- Sep 30, 2024 CVE Updated
References
- https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/ url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ advisory
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=67111271 advisory
- https://www.oracle.com/security-alerts/cpujan2020.html advisory
- https://www.oracle.com/security-alerts/cpuoct2019.html advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/ advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-244707-oncell-3120-lte-1-series-multiple-jquery-vulnerabilities advisory
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=57444186 advisory
- https://snyk.io/blog/after-three-years-of-silence-a-new-jquery-prototype-pollution-vulnerability-emerges-once-again/ url
- https://snyk.io/vuln/SNYK-JS-JQUERY-174006 url
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=41192827 url
- https://access.redhat.com/security/cve/CVE-2019-11358?extIdCarryOver=true&sc_cid=701f2000001OH7JAAW url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/ url
- https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html url
- https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html url
- https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html url
- https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 url
…and 7 more