Lucene search
Veracode Vulnerability DatabaseVERACODE:33403HistoryDec 20, 2021 - 11:36 a.m.
Prototype Pollution
2021-12-2011:36:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
57
0.01 Low
EPSS
Percentile
83.8%
dojo is vulnerable to prototype pollution. The vulnerability exists in setObject function of lang.js due to lack of object validations which allows an attacker to inject arbitrary object properties which can potentially lead to execution of arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dojo | le | 1.17.2 | |
| dojo | le | 2.0.0-alpha.7 | |
| dojo | le | 1.17.2 | |
| dojo | le | 2.0.0-alpha.7 |
Related
checkpoint_advisories
checkpoint_advisories
Dojo Prototype Pollution (CVE-2021-23450)
2022-05-15 00:00:00
ibm
ibm
osv
osv
Prototype Pollution in dojo
2022-01-05 15:01:46
CVE-2021-23450
2021-12-17 20:15:08
dojo - security update
2023-01-28 00:00:00
nessus
nessus
github
github
Prototype Pollution in dojo
2022-01-05 15:01:46
ubuntucve
ubuntucve
CVE-2021-23450
2021-12-17 00:00:00
nvd
nvd
CVE-2021-23450
2021-12-17 20:15:08
redhatcve
redhatcve
CVE-2021-23450
2021-12-22 17:55:05
prion
prion
Code injection
2021-12-17 20:15:00
debiancve
debiancve
CVE-2021-23450
2021-12-17 20:15:08
cvelist
cvelist
CVE-2021-23450 Prototype Pollution
2021-12-17 00:00:00
cve
cve
CVE-2021-23450
2021-12-17 20:15:08
debian
debian
[SECURITY] [DLA 3289-1] dojo security update
2023-01-29 10:38:26
openvas
openvas
Debian: Security Advisory (DLA-3289-1)
2023-01-30 00:00:00
Mageia: Security Advisory (MGASA-2023-0039)
2023-03-28 00:00:00
mageia
mageia
Updated dojo packages fix security vulnerability
2023-02-07 03:06:39
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00