CVE-2008-6681 Vulnerability in maven package org.apache.geronimo.plugins:dojo

Description

Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

Remediation

References

http://trac.dojotoolkit.org/ticket/2140

http://www.dojotoolkit.org/book/dojo-1-1-release-notes

http://www.securityfocus.com/bid/34661

https://exchange.xforce.ibmcloud.com/vulnerabilities/49883

Related Vulnerabilities

CVE-2018-3738 Vulnerability in npm package protobufjs

CVE-2017-16222 Vulnerability in npm package elding

CVE-2021-41038 Vulnerability in npm package @theia/plugin-ext

CVE-2010-3863 Vulnerability in maven package org.jsecurity:jsecurity

CVE-2019-5427 Vulnerability in maven package c3p0:c3p0

Severity

Critical

Classification

CWE-79