Security Bulletin: Security vulnerability has been identified in dojo library shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2018-1000665)

Summary Security vulnerability has been addressed in IBM Guardium Key Lifecycle Manager SKLM/GKLM Vulnerability Details CVEID:CVE-2018-1000665 DESCRIPTION: Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and...

com.dell.cpsd.common.messaging:common-testing (1.5.0), com.dell.cpsd:common-testing (>=2.0.0, <=2.2.0) +25 more potentially affected by CVE-2018-1000665 via org.dojotoolkit:dojo (>=1.3.0, <=1.12.3)

org.dojotoolkit:dojo MAVEN version =1.3.0, =2.0.0, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.0-rc1, =0.1, =0.1.1 and more Source cves: CVE-2018-1000665 Source advisory: OSV:GHSA-VMQ9-CM7M-4P8P...

com.dell.cpsd.common.messaging:common-testing (1.5.0), com.dell.cpsd:common-testing (>=2.0.0, <=2.2.0) +25 more potentially affected by CVE-2018-1000665 via org.dojotoolkit:dojo (>=1.3.0, <=1.12.3)

org.dojotoolkit:dojo MAVEN version =1.3.0, =2.0.0, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.0-rc1, =0.1, =0.1.1 and more Source cves: CVE-2018-1000665 Source advisory: GHSA-VMQ9-CM7M-4P8P...

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2018-1000665 via dojo (1.13.0)

dojo NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0-alpha.1, =0.1.10, =0.1.12 - dijit 1.13.0 - dojox 1.13.0 Source cves: CVE-2018-1000665 Source advisory: MEND:CVE-2018-100066...

CVE-2018-1000665

CVE-2018-1000665 affects the Dojo Dojo Objective Harness (DOH) prior to version 1.14. The vulnerability is an XSS in unit.html and related tests (testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js) that can cause a victim’s browser to execute injected s...