Skip to content
OpenAdvisories

Package · Debian

dojo

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • High 7.5
    CVE-2021-23450 EPSS 30%

    Prototype Pollution

    All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

    dojo dojo dojo Debian Ubuntu npm
  • Low 3.7
    CVE-2020-4051

    XSS in Dijit Editor's LinkDialog plugin

    In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1…

    dojo dijit dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5258

    Prototype pollution in dojo

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulat…

    dojo dojo dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5259

    Prototype Pollution in Dojox

    In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates…

    dojo dojox dojo dojo Debian Ubuntu npm
  • Medium 6.1
    CVE-2019-10785

    XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

    dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

    dojo dojo dojox Debian Ubuntu npm
  • Medium 6.1
    CVE-2018-1000665

    Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

    Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in V…

    dojo dojo org.dojotoolkit:dojo Debian Ubuntu Maven
  • Critical 9.8
    CVE-2018-15494

    dojox vulnerable to unescaped string injection

    In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

    dojo dojo dojox Debian Ubuntu npm
  • Medium 6.1
    CVE-2018-6561

    dijit editor cross-site scripting vulnerability

    dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

    dojo dojo dijit Debian Ubuntu npm
  • Medium —
    CVE-2010-2273 Public exploit

    Cross-Site Scripting in dojo

    Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly …

    dojo dojo Debian npm
  • Unscored —
    CVE-2010-2275 Public exploit

    Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote a…

    dojo Debian
  • Medium —
    CVE-2010-2274

    Dojo Open Redirect vulnerability

    Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified …

    dojo org.dojotoolkit:dojo Debian Maven