CVE-2019-5428

nonerejectedpriority · track · 0US

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 0 · none

Is it mine?

4 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · osv

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

cvss

Technical severity, 0–10. One row per scoring source.

0.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.10noneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Nsecondary · grimoire (LLM-derived)LLM-inferred

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

affected products (4)

Products and version ranges known to be affected.

Maven org.webjars.npm:jquery< 3.4.0osvUSpkg:maven/org.webjars.npm/jquery
NuGet jquery< 3.4.0osvUSpkg:nuget/jquery
RubyGems jquery-rails< 3.4.0osvUSpkg:gem/jquery-rails
npm jquery< 3.4.0osvUSpkg:npm/jquery

advisories (1)

Vendor and ecosystem advisories describing this.

GHSA-wv67-q8rr-grjpDuplicate Advisory: Prototype Pollution in jquery2019-04-23ghsa · osvUS
## Duplicate Advisory This advisory is a duplicate of [GHSA-6c3j-c64m-qhgq](https://github.com/advisories/GHSA-6c3j-c64m-qhgq). This link is maintained to preserve external references. ## Original Description Versions of `jquery` prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for `Object` causing changes in properties that will exist on all objects. ## Recommendation Upgrade to version 3.4.0 or later.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv NVD CVE.org

published 2019-04-22modified 2023-11-07

references (8) cnnvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan