Machap@machap
これはお話になりませんね。 今は主要なページは1.6.2のようですが下記脆弱性もあり、サポートが終了しており継続使用も推奨されていないバージョンを利用しているようです。 CVE-2011-4969 CVE-2012-6708 CVE-2015-9251 CVE-2019-11358 CVE-2020-7656 CVE-2020-11023 XSSが主かな？
00010261
729 followersView on X
CVE-2011-4969(jquery / jquery)
LOWCVSS 4.3 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.
0.0/ 10 priority
Sources & remediation
Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-79
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- jquery
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
jquery
2 versions affected across 1 product
Deep dive
Activity timeline1 mentions / 1d
Full discourse1 post
CPE platform detail3 entries
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jquery | jquery | - | - | - |
| App | jquery | jquery | 1.6 | - | - |
| App | jquery | jquery | 1.6.1 | - | - |