CVE-2016-10707

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names

published January 18, 2018

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any attribute getter using a mixed-cased name for boolean attributes goes into an infinite recursion, exceeding the stack call limit.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03232 · 88.1th percentile
Published
2018-01-18T23:00Z
EPSS history
Timeline
  • 18 JAN 23:00Z
    jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names
    cvelistv5