jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-01-18T23:00:00
Updated: 2024-08-06T03:30:20.218Z
Reserved: 2018-01-18T00:00:00
Link: CVE-2016-10707
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-01-18T23:29:00.400
Modified: 2024-11-21T02:44:33.457
Link: CVE-2016-10707
Redhat
No data.