Description

According to the self-reported version in the script, the version of JQuery hosted on the remote web server is greater than or equal to 1.2 and prior to 3.5.0. It is, therefore, affected by multiple cross site scripting vulnerabilities.

Note, the vulnerabilities referenced in this plugin have no security impact on PAN-OS, and/or the scenarios required for successful exploitation do not exist on devices running a PAN-OS release.
 

Solution

Upgrade to JQuery version 3.5.0 or later.
 

See Also

https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
https://security.paloaltonetworks.com/PAN-SA-2020-0007
 

Output

• URL : https://stage.quay.io/static/ldn/jquery.js-3c5c5966471e.js
  Installed version : 1.11.1
  Fixed version : 3.5.0

Reference Information

CISA-KNOWN-EXPLOITED:  2025/02/13
CEA-ID:  CEA-2021-0004, CEA-2021-0025
IAVB:  2020-B-0030
CVE:  CVE-2020-11022, CVE-2020-11023