Description

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://jvn.jp/en/jp/JVN13456571/index.html

http://jvndb.jvn.jp/jvndb/JVNDB-2015-000153

http://www.securityfocus.com/bid/77026

http://www.securitytracker.com/id/1034848

http://www-01.ibm.com/support/docview.wss?uid=swg21975256

Related Vulnerabilities

CVE-2015-8315 Vulnerability in npm package millisecond

CVE-2018-3827 Vulnerability in maven package org.elasticsearch:elasticsearch

CVE-2022-34187 Vulnerability in maven package aendter.jenkins.plugins:filesystem-list-parameter-plugin

CVE-2017-2585 Vulnerability in maven package org.keycloak:keycloak-server-spi-private

CVE-2022-34184 Vulnerability in maven package org.jenkins-ci.plugins:crx-content-package-deployer

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory