CVE-2015-6584: DataTable Vulnerable to Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unittesting/templates/6776.php.
Other sources
DataTable Vulnerable to Cross-Site Scripting
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/datatables/datatablesto a version that resolves this vulnerability.Fixed in 1.10.10 - Upgrade
Upgrade
npm/datatablesto a version that resolves this vulnerability.Fixed in 1.10.10 - Upgrade
Upgrade
DataTables plugin for jQueryto a version that resolves this vulnerability.Fixed in 1.10.10
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6584?
CVE-2015-6584 is classified as a high severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2015-6584?
To fix CVE-2015-6584, upgrade the DataTables plugin to version 1.10.10 or later.
Who is affected by CVE-2015-6584?
CVE-2015-6584 affects versions of the DataTables plugin up to and including 1.10.8 for jQuery.
What type of vulnerability is CVE-2015-6584?
CVE-2015-6584 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.
Can CVE-2015-6584 affect my website's security?
Yes, CVE-2015-6584 can compromise your website's security by allowing attackers to execute malicious scripts.