Homepage

ids-enterprise@4.22.0-dev.20190906 vulnerabilities

Infor Design System (IDS) Enterprise Components for the web

  • latest version

    4.102.1

  • latest non vulnerable version

    4.102.1

  • first published

    6 years ago

  • latest version published

    21 hours ago

  • licenses detected

  • View ids-enterprise package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the ids-enterprise package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Cross-site Scripting (XSS)

    ids-enterprise is a framework-independent UI library consisting of CSS and JS that provides product development teams, partners, and customers the tools to create user experiences that are approachable, focused, relevant, perceptive.

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS). Script tags inside dropdown options are executed when removing search text using backspace, resulting in execution of JavaScript.

    How to fix Cross-site Scripting (XSS)?

    Upgrade ids-enterprise to version 4.23.0-dev.20191105 or higher.

    <4.23.0-dev.20191105
    Go back to all versions of this package