[
https://issues.apache.org/jira/browse/SOLR-5897?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13945235#comment-13945235
]
Stefan Matheis (steffkes) edited comment on SOLR-5897 at 3/24/14 3:44 PM:
--------------------------------------------------------------------------
That's actually right - looks like the file only got renamed in
[r1311442|http://svn.apache.org/r1311442]. Patch attached
was (Author: steffkes):
That's actually right - looks like the file only got renamed. Patch attached
> JQuery file listed as version 1.7.2 but actually contains 1.4.3 code
> --------------------------------------------------------------------
>
> Key: SOLR-5897
> URL: https://issues.apache.org/jira/browse/SOLR-5897
> Project: Solr
> Issue Type: Bug
> Components: web gui
> Affects Versions: 4.1, 4.2, 4.2.1, 4.3, 4.3.1, 4.4, 4.5, 4.5.1, 4.6,
> 4.6.1, 4.7
> Environment: All
> Reporter: Jonathan Lampe
> Priority: Minor
> Labels: jquery, war
> Attachments: SOLR-5897.patch
>
>
> The "example\webapps\solr.war" file contains a "jquery-1.7.2.min.js" file
> whose name suggests that it is version 1.7.2. However, the file actually
> contains version 1.4.3 code. (This code may be subject to CVE-2011-4969.)
> (I think I read something about a functional roll-back from JQuery 1.5.1 to
> 1.4.3 in other issues - if so, could possibly be related?)
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
