Table of Contents
Impact area
Security
Severity
High
Affected element
ServiceNow
UI Script
Salesforce
Static Resource
Rule number #
SN-JSL-JQUERY-LESSTHAN-V350(for ServiceNow)
SF-JSL-JQUERY-LESSTHAN-V350(for Salesforce)
Impact #
jQuery used a regex in its jQuery.htmlPrefilter method to ensure that all closing tags were XHTML-compliant when passed to methods. An issue has been reported that demonstrated the regex could introduce a cross-site scripting (XSS) vulnerability.
Remediation #
Update jQuery to the latest version.
Time to fix
30 min
