<p>Upgrade <code>DataTables</code> to a version 1.10.10 or higher.</p>

Cross-site Scripting (XSS) Affecting datatables package, versions [,1.10.10)

Threat Intelligence

0.21% (60^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-DOTNET-DATATABLES-60136
published 6 Nov 2015
disclosed 11 Sep 2015
credit Onur Yilmaz

Report a new vulnerability Found a mistake?

Introduced: 11 Sep 2015

CVE-2015-6584 Open this link in a new tab CWE-80 Open this link in a new tab

How to fix?

Upgrade DataTables to a version 1.10.10 or higher.

Overview

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) attacks via the DataTables plugin. jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.

Details

References

CVSS Scores

version 3.1

Attack Vector (AV)

Network
Attack Complexity (AC)

Low
Privileges Required (PR)

None
User Interaction (UI)

Required

Scope (S)

Unchanged

Confidentiality (C)

None
Integrity (I)

Low
Availability (A)

None