logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2019-11358

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2019-11358

Description:
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Last updated date:
08/31/2023

Reports

alt

ACTIVELY EXPLOITED

Type:
exploitation
Confidence:
HIGH
Date of publishing:
01/21/2021
Reference url to background

https://www.tenable.com/blog/daisy-chaining-how-vulnerabilities-can-be-greater-than-the-sum-of-their-parts

Type:
exploitation
Confidence:
HIGH
Date of publishing:
07/06/2022
Type:
exploitation
Confidence:
HIGH
Date of publishing:
07/12/2022
Type:
exploit
Confidence:
HIGH
Date of publishing:
03/30/2019
Type:
exploit
Confidence:
HIGH
Date of publishing:
07/18/2019
Type:
exploit
Confidence:
HIGH
Date of publishing:
04/14/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
06/26/2020
Type:
exploit
Confidence:
HIGH
Date of publishing:
03/08/2021
Type:
exploit
Confidence:
HIGH
Date of publishing:
03/08/2021
Vulnerability FeedContributorsAboutBlog

@inTheWild

©2023

Privacy Policy