VULNERABILITY INTELLIGENCE

CVE-2021-43956

CVSS score6.1 MEDIUM

EPSS probability0.73%

CISA KEVNot currently listed

Published2022-03-16

Last modified2026-06-17

Description

The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.