A- Active Projects » BSN Corporate Digital Banking

During the application test, LGMS security team observed that the libraries used by the application are not up to date. Outdated libraries might pose serious security issues and allow an attacker to easily identify or exploit the security issue using automated tools.

bootstrap 4.1.1
The library bootstrap version 4.1.1 has known security issues. For more information, visit this website:

https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe%3A2.3%3Aa%3Agetbootstrap%3Abootstrap%3A4.1.1%3A*%3A*%3A*%3A*%3A*%3A*%3A*

jquery ui 1.10.3
The library jquery UI version 1.10.3 has known security issues. For more information, visit those websites:
https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe%3A2.3%3Aa%3Ajquery%3Ajquery_ui%3A1.10.3%3A*%3A*%3A*%3A*%3A*%3A*%3A*

Note: The vulnerability might be affecting a feature of the library that the website is not using. If the vulnerable feature is not used, this alert can be considered as false positive.

Solution provided by LGMS :
1. Identify all components and the versions that the application is using, including all dependencies (e.g., the versions plugin). It is advisable to update the components if it is not up to date.

2. Monitor the security of these components in public databases, project mailing lists, and security mailing lists, and keep them up to date.

'Affected Components:
https://10.10.55.34:9444/bsn-admin-uat/js/libs/jquery-ui-1.10.3.min.js
https://10.10.55.34:9444/bsn-admin-uat/assets/plugins/bootstrap/js/bootstrap.bundle.min.js