Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-72155

move to YUI Library version 3.18+

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Won't Fix
    • Icon: Major Major
    • core
    • None

      Security scan tool found Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter. 
      Affected Version 2.5.0 to 2.9.0 (https://nvd.nist.gov/vuln/detail/CVE-2013-6780)

      and Jenkins is using 2.9.0

      Is it possible to update to 3.18.1 ?

       

            Unassigned Unassigned
            murat01 Murat
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: