[HIVE-24039] Update jquery version to mitigate CVE-2020-11023

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-1
• Component/s: HiveServer2
• Labels: pull-request-available
• Assignee: Rajkumar Singh
• Reporter: Rajkumar Singh
• Created: 13/Aug/20 20:50
• Updated: 29/Nov/22 10:12
• Resolved: 15/Sep/20 06:59

Description

there is known vulnerability in jquery version used by hive, with this jira plan is to upgrade the jquery version 3.5.0 where it's been fixed. more details about the vulnerability can be found here.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023

Issue Links

• Is contained by: HIVE-26751 Bug Fixes and Improvements for 3.2.0 release
• links to: GitHub Pull Request #1403