dataTable.js and moment.js Security Update (MINDBREEZE26538)

ID: MINDBREEZE26538 
Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS 
Severity: 3.5 Low 
Status: Final 
First published: March 15, 2023 

Summary

DataTableJS: prototype pollution, possible XSS

MomentJS: possible regular expression DoS

 

Hotfix Information

Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:

  • Mindbreeze InSpire 23.1 Release (Version 23.1.0.410) 

  • Mindbreeze InSpire Saas 23.1 Release (Version 23.1.0.410)