Javascript framework library vulnerability

[jptec]

I've used a testing tools named BurpSuite and report the following issue:

A JavaScript framework or library is a set of tools and functions that make it easy to generate cross-browser compatible JavaScript code. If a website uses a JavaScript framework or library with vulnerabilities, attackers can use this vulnerability to hijack the user's browser and carry out such attacks as horse hijacking, XSS, and Cookie hijacking.

The test address: http://114.xx.xx.xx:8077/uni-1.90.0.1560/jQuery/jquery-1.11.2.min.js

please attached picture for reference.

 

Risk level: [Medium risk]

Risk analysis: Attackers can use this vulnerability to hijack the user's browser and carry out horse, XSS, Cookie hijacking

Security tip: Upgrade the affected javascript framework library to the latest version.

 

Please advise how to solve

[irigsoft]

1 hour ago, jptec said:

I've used a testing tools named BurpSuite and report the following issue:

A JavaScript framework or library is a set of tools and functions that make it easy to generate cross-browser compatible JavaScript code. If a website uses a JavaScript framework or library with vulnerabilities, attackers can use this vulnerability to hijack the user's browser and carry out such attacks as horse hijacking, XSS, and Cookie hijacking.

The test address: http://114.xx.xx.xx:8077/uni-1.90.0.1560/jQuery/jquery-1.11.2.min.js

please attached picture for reference.

 

Risk level: [Medium risk]

Risk analysis: Attackers can use this vulnerability to hijack the user's browser and carry out horse, XSS, Cookie hijacking

Security tip: Upgrade the affected javascript framework library to the latest version.

 

Please advise how to solve

Hello, try to disable jQuery.

On uniServerMOdule.Options.soDontLoadjQueryLib := True;

[irigsoft]

Or try some solutions:

[irigsoft]

@jptec hi, did you succeed with the jquery upgrade?