DataTable Vulnerable to Cross-Site Scripting

🗓️ 31 Aug 2020 22:42:29Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 216 Views

DataTables XSS vulnerability in versions less than 1.10.

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 23 (4.2.0.23)	2 Sep 202512:15	–	ibm
CNVD	DataTables Cross-Site Scripting Vulnerability	11 Sep 201500:00	–	cnvd
CVE	CVE-2015-6584	11 Sep 201515:00	–	cve
Cvelist	CVE-2015-6584	11 Sep 201515:00	–	cvelist
Debian CVE	CVE-2015-6584	11 Sep 201515:00	–	debiancve
EUVD	EUVD-2020-0590	7 Oct 202500:30	–	euvd
ICS	Hitachi Energy MSM Product	30 Aug 202200:00	–	ics
Node.js	Cross-Site Scripting	17 Oct 201519:41	–	nodejs
NVD	CVE-2015-6584	11 Sep 201515:59	–	nvd
OSV	DEBIAN-CVE-2015-6584	11 Sep 201515:59	–	osv

Vulners

Node

php_crud_without_refresh/reload_using_ajax_and_datatables_tutorial_project php_crud_without_refresh/reload_using_ajax_and_datatables_tutorialRange<1.10.10composer

OR

sprymedia datatablesRange<1.10.10npm

Source	Link
github	www.github.com/DataTables/DataTables/issues/602
github	www.github.com/DataTables/DataTablesSrc/commit/ccf86dc5982bd8e16d
netsparker	www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables/
npmjs	www.npmjs.com/advisories/5
securityfocus	www.securityfocus.com/archive/1/archive/1/536437/100/0/threaded
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-6584
packetstormsecurity	www.packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html
seclists	www.seclists.org/fulldisclosure/2015/Sep/37
securityfocus	www.securityfocus.com/archive/1/536437/100/0/threaded
github	www.github.com/DataTables/DataTablesSrc/commits/1.10.10

14 Sep 2023 12:04Current

8.1High risk

Vulners AI Score8.1

CVSS 24.3

EPSS0.00238

datatables plugin xss vulnerability update version