View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
10204Bug reportsCentral participant databasepublic2016-01-07 12:272016-01-08 15:37
ReporterJeffBxl Assigned Toc_schmitz  
PrioritynormalSeveritypartial_block 
Status closedResolutionno change required 
Product Version2.06+ 
Summary10204: Javascript library jquery version 1.7.2
Description

/limesurvey/third_party/qTip2/libs/jquery/jquery.js

Vulnerabilities were reported for this version of the Javascript library
Patch exist, need to upgrade.

Steps To Reproduce

https://bugs.jquery.com/ticket/11290

Additional Information

http://research.insecurelabs.org/jquery/test/

TagsNo tags attached.
Bug heat6
Complete LimeSurvey version number (& build)limesurvey206plus-build1512
I will donate to the project if issue is resolvedNo
BrowserAll
Database type & versionAll
Server OS (if known)All
Webserver software & version (if known)All
PHP VersionAll
Git branch / Pull Request URL

Users monitoring this issue

JeffBxl

Activities

DenisChenu

DenisChenu

2016-01-07 18:38

developer   ~34178

We don't include this file in any HTML part.

Best is to control https://github.com/LimeSurvey/LimeSurvey/tree/master/third_party/jquery
JeffBxl

JeffBxl

2016-01-08 11:50

reporter   ~34184

Ok, thanks for the quick reply.
You're right, it's not included in any HTML page. Is was the web security check that alerted us to this problem (old jquery lib).
It's maybe a good idea to delete this old library from you distribution package.
DenisChenu

DenisChenu

2016-01-08 11:51

developer   ~34185

This was removed on 3.0 (we use composer to get third_party).

Don't know for 2.5

Issue History

Date Modified Username Field Change
2016-01-07 12:27 JeffBxl New Issue
2016-01-07 12:34 JeffBxl Issue Monitored: JeffBxl
2016-01-07 18:38 DenisChenu Note Added: 34178
2016-01-08 11:50 JeffBxl Note Added: 34184
2016-01-08 11:51 DenisChenu Note Added: 34185
2016-01-08 15:37 c_schmitz Status new => closed
2016-01-08 15:37 c_schmitz Assigned To => c_schmitz
2016-01-08 15:37 c_schmitz Resolution open => no change required
2021-08-23 05:29 guest Bug heat 4 => 6