Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Outdated JavaScript library Handlebars, jQuery and Bootstrap #1588

Open
shiftbreak opened this issue Nov 27, 2023 · 0 comments
Open

Outdated JavaScript library Handlebars, jQuery and Bootstrap #1588

shiftbreak opened this issue Nov 27, 2023 · 0 comments
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@shiftbreak
Copy link

ScoutSuite/output/data/includes.zip contains outdated JavaScript libraries with known weaknesses:

  • Handlebars 3.0.0
  • Bootstrap 4.2.1
  • JQuery 3.3.1

ScoutSuite/output/data/html/report.html:

    <!-- Bootstrap core CSS -->
    <link href="inc-bootstrap/css/bootstrap.min.css" rel="stylesheet">
    
   ...

    <!-- jQuery -->
    <script src="inc-jquery/jquery-3.3.1.min.js"></script>

    <!-- Handlebars -->
    <script src="inc-handlebars/handlebars-v3.0.0.js"></script>

I understand that these issues are probably not exploitable. However this does lead to issues in running the tool in a corporate environment where code scans are carried out and exceptions need to be raised to use outdated libraries.

If it's possible to update these files to the latest version or a more recent version it would greatly improve usability.

@shiftbreak shiftbreak added bug Something isn't working potential Unconfirmed issue labels Nov 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Development

No branches or pull requests

1 participant