Forum Discussion

shehran's avatar
shehran
Copper Contributor
Sep 14, 2020

Out-of-date Version (jQuery)

I have this vulnerablity report which says i have a out of date jquery which is vulnerable to attacks.

which say the jquery is under sharedhovercard.js

 

4.1 /_layouts/15/sharedhovercard.js
https://tecomgdev.sharepoint.com/_layouts/15/sharedhovercard.js

 

how do i upgrade the jquery version?

2 Replies

  • tenix's avatar
    tenix
    Copper Contributor

    shehran We have the exact same vulnerability reported to have the outdated jQuery updated to the latest version. The security scan flagged sharedhovercard.js because it found the following comment: /*! jQuery v1.7.2 jquery.com */
    Could the fix for this be included in the monthly Microsoft patch?

  • kentlynch's avatar
    kentlynch
    Copper Contributor

    shehranWe have the same vulnerability. The security scan flagged sharedhovercard.js because it found the following comment at the top of the file: 
    /*! jQuery v1.7.2 jquery.com */
    We're wondering if Microsoft has a patch for this or not.

Resources