CVE-2016-10707 Denial of Service in jquery
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm jquery(npm) | >= 3.0.0-rc.1, < 3.0.0 | 3.0.0 |
| npm jquery(npm) | = 3.0.0-rc.1 | No fix listed |
| nuget jQuery(NuGet) | >= 3.0.0-rc.1, < 3.0.0 | 3.0.0 |
| nuget jQuery(NuGet) | = 3.0.0-rc.1 | No fix listed |
| org.webjars.npm/jquery(Maven) | >= 3.0.0-rc1, < 3.0.0 | 3.0.0 |
| org.webjars.npm/jquery(Maven) | = 3.0.0-rc1 | No fix listed |
| rubygems jquery-rails(RubyGems) | >= 3.0.0-rc.1, < 3.0.0 | 3.0.0 |
| rubygems jquery-rails(RubyGems) | = 3.0.0-rc.1 | No fix listed |
| jquery | = 3.0.0-rc1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit patch
- github.com issue-tracking patch
- github.com vendor-advisory
- github.com product
- github.com exploit
- snyk.io third-party-advisory
- www.npmjs.com