Masato Kinugawa Security Blog: CVE-2020-11022/CVE-2020-11023: jQuery 3.5.0ã§ä¿®æ£ã•ã‚ŒãŸSecurity Fixã®è©³ç´°English version is here: https://mksben.l0.cm/2020/05/jquery3.5.0-xss.html 先月ã€jQuery 3.5.0ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€åƒ•ãŒå ±å‘Šã—ãŸå•é¡ŒãŒSecurity Fixã¨ã—ã¦å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ jQuery 3.5.0 Released! | Official jQuery Blog https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ å ±å‘Šã—ãŸãƒã‚°ã¯ã€CVE-2020-11022〠CVE-2020-11023 ã¨ã—ã¦æŽ¡ç•ªã•ã‚Œã¦ã„ã¾ã™ã€‚ https://github.com/advisories/GHSA-gxr4-xjj5-5px2 https://github.com/advisories/GHSA-jpcq-cgw6-v4j6
ä¸æ£ãªGoogle Chromeã®æ‹¡å¼µæ©Ÿèƒ½ã«ã‚ˆã‚Šãƒšãƒ¼ã‚¸ãŒæ›¸ãæ›ãˆã‚‰ã‚Œã€ç·é¡500万円分ã®ä»®æƒ³é€šè²¨ãŒç›—ã¿å–られる | 匿åブãƒã‚°
å˜ç´”ã§ã¯ãªã„ã€æœ€æ–°ã€Œã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ティングã€äº‹æƒ…
JSONã‚’vbscriptã¨ã—ã¦èªã¿è¾¼ã¾ã›ã‚‹JSONãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯(CVE-2013-1297)ã«æ³¨æ„
Masato Kinugawa Security Blog: jQuery Mobile 1.2 Beta未満ã¯èªã¿è¾¼ã‚“ã§ã„ã‚‹ã ã‘ã§XSS脆弱性を作りã¾ã™
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚了日を2020å¹´1月31æ—¥(金)ã«æ±ºå®šã—ã¾ã—㟠- ã¯ã¦ãªã®å‘ŠçŸ¥
twitter XSS脆弱性ã®è¦³æ¸¬è¨˜éŒ² - close your eyes...
{{#tags}}- {{label}}
{{/tags}}