CVE-2008-6681 Vulnerability in maven package org.dojotoolkit:dojo

Description

Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

Remediation

References

http://trac.dojotoolkit.org/ticket/2140

http://www.dojotoolkit.org/book/dojo-1-1-release-notes

http://www.securityfocus.com/bid/34661

https://exchange.xforce.ibmcloud.com/vulnerabilities/49883

Related Vulnerabilities

CVE-2017-16154 Vulnerability in npm package earlybird

CVE-2019-9155 Vulnerability in maven package org.webjars.npm:openpgp

CVE-2013-2071 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2017-16188 Vulnerability in npm package reecerver

CVE-2019-10759 Vulnerability in npm package safer-eval

Severity

Critical

Classification

CWE-79