GMS-2015-60: XSS vulnerability

September 9, 2015

By exploiting a Cross-site scripting vulnerability the attacker can hijack a user session. This means that the malicious hacker can change a user’s password and invalidate the session of the victim.

References

github.com/DataTables/DataTables/issues/602
github.com/DataTables/DataTablesSrc/commit/ccf86dc5982bd8e16d
www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables/

Code Behaviors & Features

Detect and mitigate GMS-2015-60 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →