Prototype Pollution in dojo

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +11 more potentially affected by CVE-2021-23450 via dojo (>=1.7.11, <=1.16.4)

dojo NPM version =1.7.11, =1.0.0, =4.0.0-alpha.1, =0.0.29, =0.0.1, =1.7.11, =0.1.0, =1.8.13, =1.2.0, =0.3.0-alpha.1, =0.0.1, =0.1.1, =0.1.3 Source cves: CVE-2021-23450 Source advisory: OSV:GHSA-M8GW-HJPR-RJV7...

GHSA-M8GW-HJPR-RJV7 Prototype Pollution in dojo

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

Prototype Pollution

dojo is vulnerable to prototype pollution. The vulnerability exists in setObject function of lang.js due to lack of object validations which allows an attacker to inject arbitrary object properties which can potentially lead to execution of arbitrary code...

DEBIAN-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

Code injection

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

UBUNTU-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

CVE-2021-23450 describes a Prototype Pollution vulnerability in the Dojo package, exposed via the setObject function. Multiple connected advisories confirm Dojo is affected and note remediation by upgrading to fixed Dojo versions in vendor advisories (IBM, other vendors) and related security bull...

CVE-2021-23450: Improperly Controlled Modification of Object Prototype Attributes

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

PT-2021-7298 · Dojo +3 · Dojo +3

Name of the Vulnerable Software and Affected Versions: dojo versions all Description: The issue is related to the incorrect management of code generation in the dojo library's setObject function. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with...

dojo 安全漏洞

dojo is a JavaScript toolkit that contains utilities, UI components, and more. A security vulnerability exists in dojo that stems from the software's susceptibility to Prototype contamination via the setObject function...

Security Bulletin: Fix available for Security Vulnerability in IBM WebSphere Portal (CVE-2015-5654)

Summary Security Bulletin: Fix available for Security Vulnerability in IBM WebSphere Portal CVE-2015-5654 Vulnerability Details CVEID: CVE-2015-5654 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could explo...

Security Bulletin: Vulnerability in Dojo may affect IBM Cúram Social Program Management (CVE-2018-15494)

Summary IBM Cúram Social Program Management uses the Dojo libraries, for which there is a publicly known vulnerability. Dojo Toolkit is vulnerable to cross-site scripting attack, caused by improper validation of user-supplied input by the DataGrid component. Vulnerability Details CVEID:...

Security Bulletin: XSS vulerability in Dojo affects IBM Tivoli Business Service Manager (CVE-2018-15494)

Summary Dojo Toolkit is shipped as part of IBM Tivoli Business Manager 6.2.0. Information about security vulnerabilities affecting Dojo Toolkit has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting,...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Dojo Toolkit (CVE-2018-15494)

Summary A vulnerability in Dojo Toolkit that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the DataGrid component. A...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2020-5258)

Summary IBM WebSphere Application Server WAS is used by the IBM Rational ClearQuest server and web components. Information about security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...