Headline
CVE-2021-43956: [FE-7395] CVE-2021-43956: Javascript Prototype Pollution in the jQuery deserialize library
The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.
Details
- **Type: **
Public Security Vulnerability
**Priority: **
Low
Resolution: Fixed
Affects Version/s: 4.8.8
- Component/s: None
Description
The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.
Affected versions:
- version < 4.8.9
Fixed versions:
- 4.8.9
Issue Links
is related to
CRUC-8531 CVE-2021-43956: Javascript Prototype Pollution in the jQuery deserialize library
- Published
Activity