Lucene search
GoogleOSV:CVE-2019-10785HistoryFeb 13, 2020 - 5:15 p.m.
CVE-2019-10785
2020-02-1317:15:29
Google
osv.dev
8
0.002 Low
EPSS
Percentile
58.4%
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.
Related
nessus
nessus
Debian DLA-2127-1 : dojo security update
2020-03-02 00:00:00
prion
prion
Cross site scripting
2020-02-13 17:15:00
nvd
nvd
CVE-2019-10785
2020-02-13 17:15:29
ibm
ibm
ubuntucve
ubuntucve
CVE-2019-10785
2020-02-13 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2127-1)
2020-03-01 00:00:00
Mageia: Security Advisory (MGASA-2020-0126)
2022-01-28 00:00:00
redhatcve
redhatcve
CVE-2019-10785
2020-05-04 14:09:54
osv
osv
dojo - security update
2020-02-29 00:00:00
XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode
2020-02-13 22:21:06
debiancve
debiancve
CVE-2019-10785
2020-02-13 17:15:29
github
github
XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode
2020-02-13 22:21:06
veracode
veracode
Cross-Site Scripting (XSS)
2020-02-14 05:34:58
mageia
mageia
Updated dojo packages fix security vulnerability
2020-03-06 19:13:58
cvelist
cvelist
CVE-2019-10785
2020-02-13 16:02:46
debian
debian
[SECURITY] [DLA 2127-1] dojo security update
2020-02-29 10:58:42
cve
cve
CVE-2019-10785
2020-02-13 17:15:29
githubexploit
githubexploit
Exploit for Cross-site Scripting in Linuxfoundation Dojox
2020-12-01 09:18:57