NVD - CVE-2017-16012

CVE-2017-16012 Detail

Rejected

This vulnerability has been rejected by the source.

Description

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Source: MITRE
Description Last Modified: 06/26/2018

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource

Technical Details

Vulnerability Type (View All)

Change History

1 change record found - show changes

CVE Modified by MITRE - 6/26/2018 9:29:00 PM

Action	Type	Old Value	New Value
Changed	Description	Jquery is a javascript library for DOM traversal and manipulation, event handling, animation, and Ajax. When text/javascript responses are received from cross-origin ajax requests not containing the option `dataType`, the result is executed in `jQuery.globalEval` potentially allowing an attacker to execute arbitrary code on the origin. This affects Jquery >=1.4.0 <=1.11.3 \|\| >=1.12.4 <=2.2.4.	REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Changed	Display Vulnerability	true	false
Removed	Reference	https://github.com/jquery/jquery/issues/2432 [No Types Assigned]
Removed	Reference	https://nodesecurity.io/advisories/328 [No Types Assigned]
Removed	Reference	https://github.com/jquery/jquery/commit/b078a62013782c7424a4a61a240c23c4c0b42614%29 [No Types Assigned]

Quick Info

CVE Dictionary Entry:
CVE-2017-16012
NVD Published Date:
06/04/2018
NVD Last Modified:
06/26/2018

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database