Lucene search
GoogleOSV:GHSA-P82G-2XPP-M5R3HistorySep 11, 2020 - 9:18 p.m.
Cross-Site Scripting in dojo
2020-09-1121:18:05
Google
osv.dev
53
0.003 Low
EPSS
Percentile
65.5%
Versions of dojo prior to 1.2.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim’s browser.
Recommendation
Upgrade to version 1.2.0 or later.
References
jvn.jp/en/jp/JVN13456571/index.html
jvndb.jvn.jp/jvndb/JVNDB-2015-000153
www-01.ibm.com/support/docview.wss?uid=swg21975256
www.securityfocus.com/bid/77026
www.securitytracker.com/id/1034848
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5654
nvd.nist.gov/vuln/detail/CVE-2015-5654
snyk.io/vuln/SNYK-JS-DOJO-174933
www.npmjs.com/advisories/973
Related
cvelist
cvelist
CVE-2015-5654
2015-10-11 01:00:00
github
github
Cross-Site Scripting in dojo
2020-09-11 21:18:05
jvn
jvn
JVN#13456571: Dojo Toolkit vulnerable to cross-site scripting
2015-10-09 00:00:00
debiancve
debiancve
CVE-2015-5654
2015-10-11 01:59:03
ibm
ibm
nvd
nvd
CVE-2015-5654
2015-10-11 01:59:03
cve
cve
CVE-2015-5654
2015-10-11 01:59:03
ubuntucve
ubuntucve
CVE-2015-5654
2015-10-11 00:00:00
nodejs
nodejs
Cross-Site Scripting
2019-06-17 14:14:37
veracode
veracode
Cross-Site Scripting (XSS)
2018-11-16 08:31:53
prion
prion
Cross site scripting
2015-10-11 01:59:00