Lucene search
Veracode Vulnerability DatabaseVERACODE:25690HistoryJun 16, 2020 - 4:49 a.m.
Cross-Site Scripting (XSS)
2020-06-1604:49:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.004 Low
EPSS
Percentile
72.4%
dijit is vulnerable to cross-site scripting. A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the Editor’s LinkDialog plugin.
References
github.com/advisories/GHSA-cxjc-r2fp-7mq6
github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301
github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6
lists.debian.org/debian-lts-announce/2023/01/msg00030.html
security.netapp.com/advisory/ntap-20201023-0003/
www.oracle.com/security-alerts/cpuoct2020.html
Related
osv
osv
Cross-site Scripting in dijit editor's LinkDialog plugin
2020-06-15 21:53:12
CVE-2020-4051
2020-06-15 22:15:09
dojo - security update
2023-01-28 00:00:00
prion
prion
Cross site scripting
2020-06-15 22:15:00
cve
cve
CVE-2020-4051
2020-06-15 22:15:09
cvelist
cvelist
CVE-2020-4051 XSS in Dijit Editor's LinkDialog plugin
2020-06-15 00:00:00
redhatcve
redhatcve
CVE-2020-4051
2020-09-16 20:30:16
nvd
nvd
CVE-2020-4051
2020-06-15 22:15:09
debiancve
debiancve
CVE-2020-4051
2020-06-15 22:15:09
github
github
Cross-site Scripting in dijit editor's LinkDialog plugin
2020-06-15 21:53:12
ubuntucve
ubuntucve
CVE-2020-4051
2020-06-15 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Openjsf Dijit
2020-12-01 09:45:48
openvas
openvas
Debian: Security Advisory (DLA-3289-1)
2023-01-30 00:00:00
Mageia: Security Advisory (MGASA-2023-0039)
2023-03-28 00:00:00
debian
debian
[SECURITY] [DLA 3289-1] dojo security update
2023-01-29 10:38:26
nessus
nessus
Debian DLA-3289-1 : dojo - LTS security update
2023-01-31 00:00:00
mageia
mageia
Updated dojo packages fix security vulnerability
2023-02-07 03:06:39
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00