#23 Security vulnerability in Asemon – outdated jQuery version

[Anonymous]

Hello,

our security scan identified a vulnerability in the version of jQuery included with Asemon:

Vulnerability: jQuery 1.2–3.4.1 Multiple XSS
Installed version: 1.12.4
Fixed version: 3.5.0 or later
Affected file: js/jquery.js

Could you please check whether Asemon can be updated to use a supported version of jQuery and provide a fix?

Thank you.

Best regards,
Stanislav

[Jean-Paul Martin]

Hi Stanislav
thank you for information
I just did tests with more recent versions of jQuery but asemon_report no longer works with them
I have to understand why.
So, I cannot change that for the moment
Regards
JP