Skip to content
This repository has been archived by the owner on Jul 27, 2023. It is now read-only.

Zero-day in jQuery-File-Upload #152

Open
MarcoPro opened this issue Oct 26, 2018 · 1 comment
Open

Zero-day in jQuery-File-Upload #152

MarcoPro opened this issue Oct 26, 2018 · 1 comment

Comments

@MarcoPro
Copy link

A vulnerability has been discovered. It is recommended to update the plugin version.

https://www.zdnet.com/article/zero-day-in-popular-jquery-plugin-actively-exploited-for-at-least-three-years/?utm_campaign=Security%2BNewsletter&utm_medium=email&utm_source=Security_Newsletter_co_100

In addition there is another possible vulnerability that is described in the blueimp / jQuery-File-Upload website that is corrected with the version v9.25.1 Mitigates some Potential vulnerabilities with PHP+ImageMagick.

@MarcoPro
Copy link
Author

imagen

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant