Sumeru Cyber Security
  • Sumeru Cyber Security
  • Workarounds for prevalent vulnerabilities
    • Version Disclosure
    • Host Header Attack
    • HttpOnly and Secure Flag
    • Security Headers
    • Clickjacking
    • Weak Password
    • Username Enumeration
    • jQuery Outdated
    • Cross-Origin Resource Sharing
    • AWS S3 Bucket Misconfiguration
    • Directory Listing
    • Laravel Debug Enabled
    • Autocomplete and Remember Password Enabled
    • Brute Force Attack
    • Cross Site Request Forgery
    • SQL Injection
    • PhpMyAdmin page Available Publicly
    • Implementation of BASIC Authentication
    • Cache Browsing
    • Insecure Direct Object Reference
    • Active mixed content over https
    • Improper forgot password implementation
    • ASP.NET Debug Enabled
    • Sensitive Data Sent in GET Request
    • Weak CAPTCHA Implementation
    • Csv Injection
    • Cross Site Scripting
    • Web Server Robot.txt Information Disclosure
    • SSL Related Issues
    • Local File Inclusion
    • Weak CAPTCHA Implementation
    • Automated Form Submission
    • Php.ini File Available Publicly
    • ITLP
    • Internal Path Disclosure
    • Insecure Direct Object Reference
    • Access Token Not Expiring After Logout
  • OWASP A09-Security Logging and Monitoring Failures
  • OWASP API09-Improper Inventory Management v1.0
Powered by GitBook
On this page
  • Introduction
  • How to Test
  • Method 1:
  • Method 2:
  • Solution
  • References

Was this helpful?

  1. Workarounds for prevalent vulnerabilities

jQuery Outdated

PreviousUsername EnumerationNextCross-Origin Resource Sharing

Last updated 4 years ago

Was this helpful?

Introduction

If the jquery used on the website is out-of-date, Since this is an old version of the software, it may be vulnerable to attacks. So upgrade the installation of jQuery to the latest stable version is must.

How to Test

Method 1:

Open the browser Console and give a command console.log(jQuery().jquery); then we can see the version of jquery.

Method 2:

We can use the browser extension called Wappalyzer to view the version of jquery.

Solution

  1. Upgrade your jQuery version to latest version.

    • Add jQuery 3.4.1 & jQuery migrate 3.1.0.

    • Rectify any broken code and plugin

  2. Upgrade all the JQuery plugins to latest

References

Here is a to download for Chrome and Firefox.

Remove the lower version of jquery in the application. Check to know the latest version of jQuery.

link
here
https://issues.apache.org/jira/browse/OFBIZ-9978
https://code.jquery.com/