CVE-2019-11358 PoC — jQuery 跨站脚本漏洞

Source

https://github.com/isacaya/CVE-2019-11358

Associated Vulnerability

Title: jQuery 跨站脚本漏洞 (CVE-2019-11358)
Description:jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Readme

# CVE-2019-11358 (Prototype Pollution)
A simple poc of prototype pollution that occurs in the jQuery's (<3.4.0) extension method.
* The first argument(deep) in the extend method must be true.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →