74 matches found
Cross site scripting
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them...
CVE-2019-10785
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them...
CVE-2019-10785
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them...
CVE-2019-10785
CVE-2019-10785 affects the Dojo/Dojox component, where dojox.xmpp.util.xmlEncode only encodes the first occurrence of each character, enabling cross-site scripting in affected Dojo versions prior to 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. The connected IBM and Nessus entries corroborat...
PT-2020-5619 · Dojo +2 · Dojox +2
Name of the Vulnerable Software and Affected Versions: dojox versions prior to 1.16.1 dojox versions prior to 1.15.2 dojox versions prior to 1.14.5 dojox versions prior to 1.13.6 dojox versions prior to 1.12.7 dojox versions prior to 1.11.9 Description: The issue is related to the...
CVE-2019-10785: Improper Neutralization of Input During Web Page Generation
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them...
@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2019-10785 via dojox (>=1.11.2, <=1.13.0)
dojox NPM version =1.11.2, =0.1.10, =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2019-10785 Source advisory: SNYK:JS-DOJOX-548257...
Cross-site Scripting (XSS)
Overview dojox is a dojo extension, a rollup of many useful sub-projects and varying states of maturity, from very stable and robust, to alpha and experimental. Affected versions of this package are vulnerable to Cross-site Scripting XSS. dojox.xmpp.util.xmlEncode only encodes the first occurrenc...
dijit (>=1.10.0, <=1.10.7), dojox (1.10.3) +1 more potentially affected by CVE-2010-2273 via dojo (>=1.10.0, <=1.10.7)
dojo NPM version =1.10.0, =1.10.0, =0.3.0-alpha.1, =0.3.0-alpha.32 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...
dijit (>=1.12.1, <=1.12.3), dojox (>=1.12.1, <=1.12.3) potentially affected by CVE-2010-2273 via dojo (>=1.12.1, <=1.12.3)
dojo NPM version =1.12.1, =1.12.1, =1.12.1, =1.12.3 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...
dojox vulnerable to unescaped string injection
In Dojo Toolkit before 1.14.0, there is unescaped string injection in dojox/Grid/DataGrid...
@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), bryaktestgrid (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2018-15494 via dojox (>=1.11.2, <=1.13.0)
dojox NPM version =1.11.2, =0.1.10, =0.0.1, =0.1.0, =0.0.1, =0.5.24 Source cves: CVE-2018-15494 Source advisory: OSV:GHSA-84CM-X2Q5-8225...
Cross-Site Scripting (XSS)
This is Due to the unescaped quotes in dojox/Grid/DataGrid when editing rows, which would allow an attacker to inject arbitrary HTML and Javascript into a victim's browser. Which makes dojox vulnerable to cross-site scripting...