News for hackers. Stuff that matters.

A comment on Zero-day in jQuery plugin sample code exploited for at least three years. Parent comment

Re:Zero-day in jQuery plugin sample code exploited for at le... by tamnet83 on Monday October 22, 2018 @08:27AM (#18274054)
are other web servers vulnerable ? for example, wildfly jboss server,??
[ Parent | on HN ]
Re:Zero-day in jQuery plugin sample code exploited for at le... by blueimp on Tuesday October 23, 2018 @05:08AM (#18281880)
If the upload directory is securely configured, no.

Please refer to the vulnerability documentation here to see if you are affected: https://github.com/blueimp/jQuery-File-Upload/blob/master/VU...

[ Parent | on HN ]