● CVE — Medium
CVE-2019-11358
Vendordebian, fedoraproject, opensuse, jquery, netappProductdebian linux, fedora, leap, jquery, snapcenter, application express, agile product lifecycle management for process, banking platform, business process management suite, communications billing and revenue management, communications diameter signaling router, cloudforms, drupal, application testing suite, big data discovery, virtualization manager, communications application session controller, oncommand system manager, communications analytics, backports sle, backdrop, application service level management, banking digital experience, banking enterprise collections, bi publisherDiscoveredApr 20, 2019UpdatedNov 21, 2024
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.