Security vulnerability scan detected that TiDB status information reporting communication port 10080 has a low version of jQuery

Translated
1

Note:
This topic has been translated from a Chinese forum by GPT and might contain errors.

Original topic: 安全漏洞扫描出tidb 10080 TiDB 状态信息上报通信端口存在 jQuery版本低

| username: TiDBer_TOp1Pz6Q

When installing version V6.1 with tiup, the following vulnerabilities appear on the tidb 10080 port during an internal network security scan. How can they be resolved?

  1. Enable directory listing detection: If not needed, disable directory listing in the web server configuration.
  2. jQuery version: jQuery 1.0.3 < 3.5.0 XSS Vulnerability. It is recommended to upgrade to 3.5.0.
  3. jQuery Cross-Site Scripting (XSS) Vulnerability

Experts, please help resolve these issues. The security level requirements are high, and they must be fixed.

2
| username: s3nt3 | Original post link

The TiDB 10080 port is not using any frontend components, this is a false positive from the tool and there is no security risk.