Lucene search

K

Dojox Security Vulnerabilities

cve
cve

CVE-2020-5259

In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...

8.6CVSS

8.2AI Score

0.002EPSS

2020-03-10 06:15 PM
43
3
cve
cve

CVE-2019-10785

dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of...

6.1CVSS

6AI Score

0.002EPSS

2020-02-13 05:15 PM
68
2