NetSight
IP …
medium6.1Public exploit code

CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Affected products

VendorProductAffected versions
JqueryJquery
before 3.4.0
DebianDebian Linux
Versions 8.0, 9.0, 10.0
DrupalDrupal
from 7.0 before 7.66
from 8.5.0 before 8.5.15
from 8.6.0 before 8.6.15
BackdropcmsBackdrop
from 1.11.0 before 1.11.9
from 1.12.0 before 1.12.6
FedoraprojectFedora
Versions 28, 29, 30
OpensuseBackports Sle
Version 15.0
OpensuseLeap
Version 15.1
NetappOncommand System Manager
from 3.0 through 3.1.3
NetappSnapcenter
All versions
RedhatCloudforms
Version 4.7
RedhatVirtualization Manager
Version 4.3
OracleAgile Product Lifecycle Management For Process
Versions 6.1, 6.2.0.0, 6.2.1.0, 6.2.2.0, 6.2.3.0

Weakness classification

CWE-1321

References