dataTable.js and moment.js Security Update (MINDBREEZE26538)
ID: MINDBREEZE26538
Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS
Severity: 3.5 Low
Status: Final
First published: March 15, 2023
Summary
DataTableJS: prototype pollution, possible XSS
MomentJS: possible regular expression DoS
Hotfix Information
Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:
-
Mindbreeze InSpire 23.1 Release (Version 23.1.0.410)
-
Mindbreeze InSpire Saas 23.1 Release (Version 23.1.0.410)