F5-K66544153: Low severity F5 BIG-IP vulnerability
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K66544153?
The F5-K66544153 vulnerability is classified as a medium risk due to the potential for executing untrusted code.
How do I fix F5-K66544153?
To remediate F5-K66544153, upgrade to jQuery version 3.5.0 or later.
Which software is affected by F5-K66544153?
F5-K66544153 affects certain versions of F5 BIG-IP and F5 Traffix SDC.
What types of attacks can F5-K66544153 facilitate?
F5-K66544153 can facilitate Cross-Site Scripting (XSS) attacks due to improper handling of untrusted content.
How can I identify if I'm vulnerable to F5-K66544153?
You can identify vulnerability to F5-K66544153 by checking if your jQuery version is between 1.0.3 and 3.5.0.