Vulnerability Bulletins |
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-006 |
|
| Affected software | Drupal |
|
Project: Drupal coreDate: 2019-April-17Security risk: Moderately critical 10∕25 AC:Complex/A:Admin/CI:Some/II:Some/E:Theoretical/TD:UncommonVulnerability: Cross Site ScriptingCVE IDs: CVE-2019-11358Description: The jQuery project released version 3.4.0, and as part of that, disclosed a security vulnerability that affects all prior versions. As described in their release notes:jQuery 3.4.0 includes a fix for some unintended behavior when using jQuery.extend(true, {}, ...). If an More info: https://www.drupal.org/sa-core-2019-006 |
|