[SOLR-5897] JQuery file listed as version 1.7.2 but actually contains 1.4.3 code

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 4.1, 4.2, 4.2.1, 4.3, 4.3.1, 4.4, 4.5, 4.5.1, 4.6, 4.6.1, 4.7
• Fix Version/s: 4.8, 4.9, 6.0
• Component/s: Admin UI
• Labels: jquery war

Environment

All

• Assignee: Stefan Matheis
• Reporter: Jonathan Lampe
• Created: 21/Mar/14 18:04
• Updated: 16/Feb/17 15:55
• Resolved: 21/Apr/14 15:28

Description

The "example\webapps\solr.war" file contains a "jquery-1.7.2.min.js" file whose name suggests that it is version 1.7.2. However, the file actually contains version 1.4.3 code. (This code may be subject to CVE-2011-4969.)

(I think I read something about a functional roll-back from JQuery 1.5.1 to 1.4.3 in other issues - if so, could possibly be related?)