Description
The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component.
References
- ADV-2010-1281 vdb-entry
- LO50849 vendor-advisory
- LO50932 vendor-advisory
- LO50994 vendor-advisory
- LO50833 vendor-advisory
- 38964 third-party-advisory
- LO50958 vendor-advisory
- LO50856 vendor-advisory
- http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
- LO50896 vendor-advisory
- 40007 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472