[FELIX-6561] Vulnerabilities in jquery-ui-1.12.1.js

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: webconsole-4.6.4, webconsole-4.7.2, webconsole-4.8.2
• Fix Version/s: webconsole-4.8.4
• Component/s: Web Console
• Labels: CVE SECURITY jquery-ui vulnerabilities
• Flags: Important
• Assignee: Carsten Ziegeler
• Reporter: Robert Alan Chapton
• Created: 22/Aug/22 21:13
• Updated: 05/Sep/22 05:09
• Resolved: 02/Sep/22 05:08

Description

jQuery-UI 1.12.1 used by felix webconsole has 3 security vulnerabilities

https://www.cvedetails.com/cve/CVE-2021-41182/
https://www.cvedetails.com/cve/CVE-2021-41183/
https://www.cvedetails.com/cve/CVE-2021-41184/

the file in question is located within felix webconsole

res/lib/jquery-ui-1.12.1.js