PT-2020-6852 · Dijit +3 · Dijit +3

Name of the Vulnerable Software and Affected Versions: Dijit versions 1.11.0 through 1.11.10 Dijit versions 1.12.0 through 1.12.8 Dijit versions 1.13.0 through 1.13.7 Dijit versions 1.14.0 through 1.14.6 Dijit versions 1.15.0 through 1.15.3 Dijit versions 1.16.0 through 1.16.2 Description: The...

bryaktestgrid (>=0.0.1, <=0.0.6), dijit (>=1.7.11, <=1.11.9) +7 more potentially affected by CVE-2020-5258 via dojo (>=1.7.11, <=1.11.9)

dojo NPM version =1.7.11, =0.0.1, =1.7.11, =0.1.0, =1.8.13, =1.2.0, =0.3.0-alpha.1, =0.0.1, =0.1.1, =0.1.3 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

dijit (>=1.12.1, <=1.12.7), dojox (>=1.12.1, <=1.12.7) potentially affected by CVE-2020-5258 via dojo (>=1.12.1, <=1.12.7)

dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.7 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

dijit (>=1.14.0, <=1.14.5), dojox (>=1.14.0, <=1.14.5) potentially affected by CVE-2020-5258 via dojo (>=1.14.0, <=1.14.5)

dojo NPM version =1.14.0, =1.14.0, =1.14.0, =1.14.5 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

dijit (>=1.15.0, <=1.15.2), dojox (>=1.15.0, <=1.15.2) potentially affected by CVE-2020-5258 via dojo (>=1.15.0, <=1.15.2)

dojo NPM version =1.15.0, =1.15.0, =1.15.0, =1.15.2 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

dijit (>=1.16.0, <=1.16.1), dojox (>=1.16.0, <=1.16.1) potentially affected by CVE-2020-5258 via dojo (>=1.16.0, <=1.16.1)

dojo NPM version =1.16.0, =1.16.0, =1.16.0, =1.16.1 Source cves: CVE-2020-5258 Source advisory: OSV:GHSA-JXFH-8WGV-VFR2...

bryaktestgrid (>=0.0.1, <=0.0.6), dijit (>=1.7.11, <=1.11.9) +7 more potentially affected by CVE-2020-5258 via dojo (>=1.7.11, <=1.11.9)

dojo NPM version =1.7.11, =0.0.1, =1.7.11, =0.1.0, =1.8.13, =1.2.0, =0.3.0-alpha.1, =0.0.1, =0.1.1, =0.1.3 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.12.1, <=1.12.7), dojox (>=1.12.1, <=1.12.7) potentially affected by CVE-2020-5258 via dojo (>=1.12.1, <=1.12.7)

dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.7 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.14.0, <=1.14.5), dojox (>=1.14.0, <=1.14.5) potentially affected by CVE-2020-5258 via dojo (>=1.14.0, <=1.14.5)

dojo NPM version =1.14.0, =1.14.0, =1.14.0, =1.14.5 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.15.0, <=1.15.2), dojox (>=1.15.0, <=1.15.2) potentially affected by CVE-2020-5258 via dojo (>=1.15.0, <=1.15.2)

dojo NPM version =1.15.0, =1.15.0, =1.15.0, =1.15.2 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.16.0, <=1.16.1), dojox (>=1.16.0, <=1.16.1) potentially affected by CVE-2020-5258 via dojo (>=1.16.0, <=1.16.1)

dojo NPM version =1.16.0, =1.16.0, =1.16.0, =1.16.1 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

dijit (>=1.10.0, <=1.10.7), dojox (1.10.3) +1 more potentially affected by CVE-2010-2273 via dojo (>=1.10.0, <=1.10.7)

dojo NPM version =1.10.0, =1.10.0, =0.3.0-alpha.1, =0.3.0-alpha.32 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

dijit (>=1.12.1, <=1.12.3), dojox (>=1.12.1, <=1.12.3) potentially affected by CVE-2010-2273 via dojo (>=1.12.1, <=1.12.3)

dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2010-2273 via dojo (1.13.0)

dojo NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0-alpha.1, =0.1.10, =0.1.12 - dijit 1.13.0 - dojox 1.13.0 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

PT-2018-14999

Name of the Vulnerable Software and Affected Versions Dotcms versions prior to 5.0.4 Description An issue was discovered that allows attackers to perform XSS attacks. The attack can be performed via the inode, identifier, or fieldName parameter in the "html/js/dotcms/dijit/image/image tool.jsp"...

Dojo Toolkit Cross-Site Scripting Vulnerability

Dojo Toolkit is the Dojo Foundation an open source DHTML toolkit implemented in the JavaScript language . The toolkit is easy to build interactive user interface , Dojo's extension package can make the user's code easier to maintain , less coupling , etc. dijit.Editor is one of the WYSIWYG editor...

Cross-site Scripting (XSS)

dijit is vulnerable to cross-site scripting XSS attacks. Attackers can execute arbitrary webscript through the onload attributes of SVG elements...

DEBIAN-CVE-2018-6561

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...

UBUNTU-CVE-2018-6561

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...

DEBIAN-CVE-2010-2275

Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...