[
https://issues.apache.org/jira/browse/SOLR-5897?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13975681#comment-13975681
]
ASF subversion and git services commented on SOLR-5897:
-------------------------------------------------------
Commit 1588913 from [email protected] in branch 'dev/trunk'
[ https://svn.apache.org/r1588913 ]
SOLR-5897: Add license header
> JQuery file listed as version 1.7.2 but actually contains 1.4.3 code
> --------------------------------------------------------------------
>
> Key: SOLR-5897
> URL: https://issues.apache.org/jira/browse/SOLR-5897
> Project: Solr
> Issue Type: Bug
> Components: web gui
> Affects Versions: 4.1, 4.2, 4.2.1, 4.3, 4.3.1, 4.4, 4.5, 4.5.1, 4.6,
> 4.6.1, 4.7
> Environment: All
> Reporter: Jonathan Lampe
> Assignee: Stefan Matheis (steffkes)
> Priority: Minor
> Labels: jquery, war
> Fix For: 4.9
>
> Attachments: SOLR-5897.patch
>
>
> The "example\webapps\solr.war" file contains a "jquery-1.7.2.min.js" file
> whose name suggests that it is version 1.7.2. However, the file actually
> contains version 1.4.3 code. (This code may be subject to CVE-2011-4969.)
> (I think I read something about a functional roll-back from JQuery 1.5.1 to
> 1.4.3 in other issues - if so, could possibly be related?)
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
