CVE-2020-11022

Advisory

Tethys-platform 3.2.0 updates its dependency 'jQuery' to v3.5.1 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Release Notes:

* Multi-Factor Authentication for Tethys Portal
* Additional Single Sign-On Backends: Azure Active Directory, Active Directory Federation Services (AD FS), OneLogin, Okta.
* Automatic Lockout for Tethys Portal
* Various Jobs Table Improvements
* Additional MVLayers features supported in Cesium Map View
* Update jQuery to 3.5.1 to address known vulnerabilities.
* Documentation for configuring REDIS for Tethys Platform in production.
* Fixed an issue with the tethys command line interface not working on systems without Docker installed.
* Fixed issue with Add User admin page that would prevent adding additional users after the first user was added.
* Modified the Condor Scheduler admin pages to use the PasswordInput field for the password fields.
* Updated the default ASGI configuration file so that it can be killed properly by supervisor when stopped.

For more information see [What's New Article](http://docs.tethysplatform.org/en/stable/whats_new.html)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022