Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: dojo Clear all filters
TI-2020-03540 CVE-2020-4051 · GHSA-cxjc-r2fp-7mq6

XSS in Dijit Editor's LinkDialog plugin

Priority LOW 27

In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01177 Published 2020-06-15 Fixed in 1.11.11, 1.12.9 +4 CWE-79
TI-2020-04314 CVE-2020-5258 · GHSA-jxfh-8wgv-vfr2

Prototype pollution in dojo

Priority MEDIUM 42

In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.04023 Published 2020-03-10 Fixed in 1.12.8, 1.13.7 +4 CWE-94
TI-2020-04315 CVE-2020-5259 · GHSA-3hw5-q855-g6cw

Prototype Pollution in Dojox

Priority MEDIUM 41

In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02018 Published 2020-03-10 Fixed in 1.11.10, 1.12.8 +4 CWE-94