Boletines de Vulnerabilidades

Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2020-002

   
Software afectado Drupal
 
Project: Drupal coreDate: 2020-May-20Security risk: Moderately critical 10∕25 AC:Complex/A:Admin/CI:Some/II:Some/E:Theoretical/TD:UncommonVulnerability: Cross Site ScriptingDescription: The jQuery project released version 3.5.0, and as part of that, disclosed two security vulnerabilities that affect all prior versions. As mentioned in the jQuery blog, both are [...] security issues in jQuery’s DOM manipulation methods, as in .html(), .append(), and the others. Security advisories

More info:

https://www.drupal.org/sa-core-2020-002