CVE-2021-43853: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

December 22, 2021 (updated August 9, 2022)

Ajax.Releases are affected. A workaround exists that replaces one of the core JavaScript files embedded in the library. See the GHSA-5q7q-qqw2-hjq7 for workaround details.

References

github.com/michaelschwarz/Ajax.NET-Professional/commit/c89e39b9679fcb8ab6644fe21cc7e652cb615e2b
github.com/michaelschwarz/Ajax.NET-Professional/releases/tag/v21.12.22.1
github.com/michaelschwarz/Ajax.NET-Professional/security/advisories/GHSA-5q7q-qqw2-hjq7
nvd.nist.gov/vuln/detail/CVE-2021-43853

Code Behaviors & Features

Detect and mitigate CVE-2021-43853 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →