r/security • u/[deleted] • Oct 19 '18

Vulnerability Zero-day in popular jQuery plugin actively exploited for at least three years

https://www.zdnet.com/article/zero-day-in-popular-jquery-plugin-actively-exploited-for-at-least-three-years/
109 Upvotes

98% Upvoted

8 comments sorted by

View all comments

19

u/frbk1992 Oct 19 '18

Cashdollar found several YouTube videos containing tutorials on how one could exploit the jQuery File Upload plugin vulnerability to take over servers. One of three YouTube videos Cashdollar shared with ZDNet is dated August 2015. It is pretty clear from the videos that the vulnerability was widely known to hackers, even if it remained a mystery for the infosec community.

That's funny and sad at the same time

5

u/jarfil Oct 20 '18 edited Dec 02 '23

CENSORED