CVE-2016-10707

7.5

HIGHCVSS v3

Published

January 18, 2018

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.

jquery/jquery

GitHubjQuery JavaScript Library

= 3.0.0NVD

jquery

NPMJavaScript library for DOM operations

= 3.0.0NVD

@types/jquery

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for jquery

= 3.0.0NVD

jquery

Python Package IndexJquery javascript library for TurboGears

= 3.0.0NVD

jQuery

NuGet GalleryjQuery is a new kind of JavaScript Library. jQuery is a fast and concise JavaScript Library that simplifies HTML document traversing, event handling, animating, and Ajax interactions for rapid web development. jQuery is designed to change the way that you write JavaScript. NOTE: This package is maintained on behalf of the library owners by the NuGet Community Packages project at http://nugetpackages.codeplex.com/

= 3.0.0NVD

jquery

RubyGemsjQuery for Ruby.

= 3.0.0NVD

Security Advisories

CVE-2016-10707

Description

More on this CVE