Read the docs

dojo

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

dojo records in CISA KEV

No dojo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Affiliate Links 1 record LOW

Records

4 records

TI-2020-04314 CVE-2020-5258 · GHSA-jxfh-8wgv-vfr2

Prototype pollution in dojo

Priority MEDIUM 42

In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.04023 Published 2020-03-10 Fixed in 1.12.8, 1.13.7 +4 CWE-94
TI-2020-04315 CVE-2020-5259 · GHSA-3hw5-q855-g6cw

Prototype Pollution in Dojox

Priority MEDIUM 41

In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02018 Published 2020-03-10 Fixed in 1.11.10, 1.12.8 +4 CWE-94
TI-2020-03540 CVE-2020-4051 · GHSA-cxjc-r2fp-7mq6

XSS in Dijit Editor's LinkDialog plugin

Priority LOW 27

In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01177 Published 2020-06-15 Fixed in 1.11.11, 1.12.9 +4 CWE-79
Open these records in search →