Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

phpIPAM Outdated and Vulnerable JavaScript Libraries #4100

Open
pedronao opened this issue May 2, 2024 · 0 comments
Open

phpIPAM Outdated and Vulnerable JavaScript Libraries #4100

pedronao opened this issue May 2, 2024 · 0 comments

Comments

@pedronao
Copy link

pedronao commented May 2, 2024

Hello @GaryAllan,

There are a few CVEs related to the mentioned libraries:

JS Library/Version CVE-ID Vulnerability Type CVSS Rating
bootstrap 3.3.7 CVE-2019-8331 Cross-site Scripting (XSS) 6.5
CVE-2018-20676 Cross-site Scripting (XSS) 6.5
CVE-2018-20677 Cross-site Scripting (XSS) 6.5
CVE-2018-14040 Cross-site Scripting (XSS) 6.5
CVE-2016-10735 Cross-site Scripting (XSS) 6.5
jquery-ui 1.12.1 CVE-2022-31160 Cross-site Scripting (XSS) 5.4
CVE-2021-41184 Cross-site Scripting (XSS) 6.1
CVE-2021-41182 Cross-site Scripting (XSS) 6.1
CVE-2021-41183 Cross-site Scripting (XSS) 6.1

It would be appreciated to know if they're false positives.

Best regards,
Pedro Noronha

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant