/ 
App-Netdisco-2.009000_001
River stage one • 1 direct dependent • 1 total dependent
⭐ Starred 676 GitHub stars
Security Advisories (9)
CVE-2020-11022 (2020-04-29)

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2020-11023 (2020-04-29)

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2019-11358 (2019-04-20)

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

CVE-2015-9251 (2018-01-18)

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVE-2011-4969 (2013-03-08)

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

CVE-2012-6708 (2018-01-18)

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.

CVE-2020-7656 (2020-05-19)

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVE-2019-5428

Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. JavaScript allows all Object attributes to be altered, including their magical attributes such as _proto_, constructor and prototype. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other values. Properties on the Object.prototype are then inherited by all the JavaScript objects through the prototype chain. When that happens, this leads to either denial of service by triggering JavaScript exceptions, or it tampers with the application source code to force the code path that the attacker injects, thereby leading to remote code execution.

CVE-2014-6071 (2018-01-16)

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

Changes for version 2.009000_001

  • NEW FEATURES
    • Support for delegated authentication with REMOTE_USER and X-REMOTE_USER
    • Ask to set up guest user for Admin/Port Control rights in deploy script
    • Job Queue page play/pause/refresh controls
  • ENHANCEMENTS
    • Database config simplified to only four essential settings
    • Use DBIx::Class new collapsed query support when we can
    • Add discoverall, macwalk, arpwalk items to the Admin Tasks menu
    • Increase default frequency of job queue polling to 2 seconds
    • Add tooltip showing the job queue item logged status message
  • BUG FIXES
    • Macwalk and Arpwalk job defer fixed
    • Sort VLANs, MACs, IPs properly in Device Port view
    • Fix hyperlinks when running behind reverse proxy on custom path
    • Add workaround for https://github.com/PerlDancer/Dancer/issues/935
    • Fix Plack middleware config for Expiry

Documentation

nd-dbic-versions
Create DB Schema Versions for Netdisco
nd-import-topology
Import a Nedisco 1.x Manual Topology File
netdisco-daemon
Job Control Daemon for Netdisco
netdisco-daemon-fg
Job Control for Netdisco
netdisco-db-deploy
Database deployment for Netdisco
netdisco-deploy
Database, OUI and MIB deployment for Netdisco
netdisco-do
Run any Netdisco job from the command-line.
netdisco-web
Web Application Server for Netdisco
netdisco-web-fg
Web Application for Netdisco
App::Netdisco::Manual::Configuration
How to Configure Netdisco
App::Netdisco::Manual::Deployment
Tips and Tricks for Deployment
App::Netdisco::Manual::Developing
Notes for contributors
App::Netdisco::Manual::ReleaseNotes
Release Notes
App::Netdisco::Manual::WritingPlugins
Documentation on Plugins for Developers

Modules

App::Netdisco
An open source web-based network management tool.
App::Netdisco::Core::Arpnip
App::Netdisco::Core::Discover
App::Netdisco::Core::Macsuck
App::Netdisco::DB::ExplicitLocking
Support for PostgreSQL Lock Modes
App::Netdisco::Util::DNS
App::Netdisco::Util::Device
App::Netdisco::Util::Port
App::Netdisco::Util::PortMAC
App::Netdisco::Util::SNMP
App::Netdisco::Util::SanityCheck
App::Netdisco::Util::Web
App::Netdisco::Web::Plugin
Netdisco Web UI components

Provides

App::Netdisco::DB
in lib/App/Netdisco/DB.pm
App::Netdisco::DB::Result::Admin
in lib/App/Netdisco/DB/Result/Admin.pm
App::Netdisco::DB::Result::Device
in lib/App/Netdisco/DB/Result/Device.pm
App::Netdisco::DB::Result::DeviceIp
in lib/App/Netdisco/DB/Result/DeviceIp.pm
App::Netdisco::DB::Result::DeviceModule
in lib/App/Netdisco/DB/Result/DeviceModule.pm
App::Netdisco::DB::Result::DevicePort
in lib/App/Netdisco/DB/Result/DevicePort.pm
App::Netdisco::DB::Result::DevicePortLog
in lib/App/Netdisco/DB/Result/DevicePortLog.pm
App::Netdisco::DB::Result::DevicePortPower
in lib/App/Netdisco/DB/Result/DevicePortPower.pm
App::Netdisco::DB::Result::DevicePortSsid
in lib/App/Netdisco/DB/Result/DevicePortSsid.pm
App::Netdisco::DB::Result::DevicePortVlan
in lib/App/Netdisco/DB/Result/DevicePortVlan.pm
App::Netdisco::DB::Result::DevicePortWireless
in lib/App/Netdisco/DB/Result/DevicePortWireless.pm
App::Netdisco::DB::Result::DevicePower
in lib/App/Netdisco/DB/Result/DevicePower.pm
App::Netdisco::DB::Result::DeviceRoute
in lib/App/Netdisco/DB/Result/DeviceRoute.pm
App::Netdisco::DB::Result::DeviceVlan
in lib/App/Netdisco/DB/Result/DeviceVlan.pm
App::Netdisco::DB::Result::Log
in lib/App/Netdisco/DB/Result/Log.pm
App::Netdisco::DB::Result::Node
in lib/App/Netdisco/DB/Result/Node.pm
App::Netdisco::DB::Result::NodeIp
in lib/App/Netdisco/DB/Result/NodeIp.pm
App::Netdisco::DB::Result::NodeMonitor
in lib/App/Netdisco/DB/Result/NodeMonitor.pm
App::Netdisco::DB::Result::NodeNbt
in lib/App/Netdisco/DB/Result/NodeNbt.pm
App::Netdisco::DB::Result::NodeWireless
in lib/App/Netdisco/DB/Result/NodeWireless.pm
App::Netdisco::DB::Result::Oui
in lib/App/Netdisco/DB/Result/Oui.pm
App::Netdisco::DB::Result::Process
in lib/App/Netdisco/DB/Result/Process.pm
App::Netdisco::DB::Result::Session
in lib/App/Netdisco/DB/Result/Session.pm
App::Netdisco::DB::Result::Subnet
in lib/App/Netdisco/DB/Result/Subnet.pm
App::Netdisco::DB::Result::Topology
in lib/App/Netdisco/DB/Result/Topology.pm
App::Netdisco::DB::Result::User
in lib/App/Netdisco/DB/Result/User.pm
App::Netdisco::DB::Result::UserLog
in lib/App/Netdisco/DB/Result/UserLog.pm
App::Netdisco::DB::Result::Virtual::ActiveNode
in lib/App/Netdisco/DB/Result/Virtual/ActiveNode.pm
App::Netdisco::DB::Result::Virtual::ActiveNodeWithAge
in lib/App/Netdisco/DB/Result/Virtual/ActiveNodeWithAge.pm
App::Netdisco::DB::Result::Virtual::DeviceLinks
in lib/App/Netdisco/DB/Result/Virtual/DeviceLinks.pm
App::Netdisco::DB::Result::Virtual::DevicePortVlanNative
in lib/App/Netdisco/DB/Result/Virtual/DevicePortVlanNative.pm
App::Netdisco::DB::Result::Virtual::DevicePortVlanTagged
in lib/App/Netdisco/DB/Result/Virtual/DevicePortVlanTagged.pm
App::Netdisco::DB::Result::Virtual::DuplexMismatch
in lib/App/Netdisco/DB/Result/Virtual/DuplexMismatch.pm
App::Netdisco::DB::Result::Virtual::NodeWithAge
in lib/App/Netdisco/DB/Result/Virtual/NodeWithAge.pm
App::Netdisco::DB::ResultSet::Admin
in lib/App/Netdisco/DB/ResultSet/Admin.pm
App::Netdisco::DB::ResultSet::Device
in lib/App/Netdisco/DB/ResultSet/Device.pm
App::Netdisco::DB::ResultSet::DevicePort
in lib/App/Netdisco/DB/ResultSet/DevicePort.pm
App::Netdisco::DB::ResultSet::Node
in lib/App/Netdisco/DB/ResultSet/Node.pm
App::Netdisco::DB::ResultSet::NodeIp
in lib/App/Netdisco/DB/ResultSet/NodeIp.pm
App::Netdisco::DB::ResultSet::NodeWireless
in lib/App/Netdisco/DB/ResultSet/NodeWireless.pm
App::Netdisco::DB::ResultSet::Subnet
in lib/App/Netdisco/DB/ResultSet/Subnet.pm
App::Netdisco::Daemon::DB
in lib/App/Netdisco/Daemon/DB.pm
App::Netdisco::Daemon::DB::Result::Admin
in lib/App/Netdisco/Daemon/DB/Result/Admin.pm
App::Netdisco::Daemon::Queue
in lib/App/Netdisco/Daemon/Queue.pm
App::Netdisco::Daemon::Util
in lib/App/Netdisco/Daemon/Util.pm
App::Netdisco::Daemon::Worker::Common
in lib/App/Netdisco/Daemon/Worker/Common.pm
App::Netdisco::Daemon::Worker::Interactive
in lib/App/Netdisco/Daemon/Worker/Interactive.pm
App::Netdisco::Daemon::Worker::Interactive::DeviceActions
in lib/App/Netdisco/Daemon/Worker/Interactive/DeviceActions.pm
App::Netdisco::Daemon::Worker::Interactive::PortActions
in lib/App/Netdisco/Daemon/Worker/Interactive/PortActions.pm
App::Netdisco::Daemon::Worker::Manager
in lib/App/Netdisco/Daemon/Worker/Manager.pm
App::Netdisco::Daemon::Worker::Poller
in lib/App/Netdisco/Daemon/Worker/Poller.pm
App::Netdisco::Daemon::Worker::Poller::Arpnip
in lib/App/Netdisco/Daemon/Worker/Poller/Arpnip.pm
App::Netdisco::Daemon::Worker::Poller::Common
in lib/App/Netdisco/Daemon/Worker/Poller/Common.pm
App::Netdisco::Daemon::Worker::Poller::Device
in lib/App/Netdisco/Daemon/Worker/Poller/Device.pm
App::Netdisco::Daemon::Worker::Poller::Macsuck
in lib/App/Netdisco/Daemon/Worker/Poller/Macsuck.pm
App::Netdisco::Daemon::Worker::Scheduler
in lib/App/Netdisco/Daemon/Worker/Scheduler.pm
App::Netdisco::Util::Noop
in lib/App/Netdisco/Util/Noop.pm
App::Netdisco::Web
in lib/App/Netdisco/Web.pm
App::Netdisco::Web::AdminTask
in lib/App/Netdisco/Web/AdminTask.pm
App::Netdisco::Web::AuthN
in lib/App/Netdisco/Web/AuthN.pm
App::Netdisco::Web::Device
in lib/App/Netdisco/Web/Device.pm
App::Netdisco::Web::Plugin::AdminTask::JobQueue
in lib/App/Netdisco/Web/Plugin/AdminTask/JobQueue.pm
App::Netdisco::Web::Plugin::AdminTask::PseudoDevice
in lib/App/Netdisco/Web/Plugin/AdminTask/PseudoDevice.pm
App::Netdisco::Web::Plugin::AdminTask::Topology
in lib/App/Netdisco/Web/Plugin/AdminTask/Topology.pm
App::Netdisco::Web::Plugin::Device::Addresses
in lib/App/Netdisco/Web/Plugin/Device/Addresses.pm
App::Netdisco::Web::Plugin::Device::Details
in lib/App/Netdisco/Web/Plugin/Device/Details.pm
App::Netdisco::Web::Plugin::Device::Modules
in lib/App/Netdisco/Web/Plugin/Device/Modules.pm
App::Netdisco::Web::Plugin::Device::Neighbors
in lib/App/Netdisco/Web/Plugin/Device/Neighbors.pm
App::Netdisco::Web::Plugin::Device::Ports
in lib/App/Netdisco/Web/Plugin/Device/Ports.pm
App::Netdisco::Web::Plugin::Inventory
in lib/App/Netdisco/Web/Plugin/Inventory.pm
App::Netdisco::Web::Plugin::Report::DuplexMismatch
in lib/App/Netdisco/Web/Plugin/Report/DuplexMismatch.pm
App::Netdisco::Web::Plugin::Search::Device
in lib/App/Netdisco/Web/Plugin/Search/Device.pm
App::Netdisco::Web::Plugin::Search::Node
in lib/App/Netdisco/Web/Plugin/Search/Node.pm
App::Netdisco::Web::Plugin::Search::Port
in lib/App/Netdisco/Web/Plugin/Search/Port.pm
App::Netdisco::Web::Plugin::Search::VLAN
in lib/App/Netdisco/Web/Plugin/Search/VLAN.pm
App::Netdisco::Web::PortControl
in lib/App/Netdisco/Web/PortControl.pm
App::Netdisco::Web::Report
in lib/App/Netdisco/Web/Report.pm
App::Netdisco::Web::Search
in lib/App/Netdisco/Web/Search.pm
App::Netdisco::Web::Static
in lib/App/Netdisco/Web/Static.pm
App::Netdisco::Web::TypeAhead
in lib/App/Netdisco/Web/TypeAhead.pm
App::NetdiscoX::Web::Plugin::Observium
in lib/App/NetdiscoX/Web/Plugin/Observium.pm

Other files