GHSA-j4gv-6x9v-v23g ("jquery-form library may be vulnerable to XSS attack")

Affects OMERO.web <=5.29.2

back to Advisories

Synopsis

jquery-form library may be vulnerable to XSS attack

Background

OMERO.web uses the jquery-form library throughout to handle form submission and response processing. Due to some unpatched potential vulnerabilities in jquery-form, OMERO.web 5.29.2 and earlier may be susceptible to XSS attacks.

Affected Packages

OMERO.web <=5.29.2

Impact

Low severity.

Resolution

All OMERO.web deployments should be upgraded to at least 5.29.3.

back to top