Security Bulletin: IBM Jazz Reporting Services is vulnerable to a to cross-site scripting (CVE-2020-4051)

Summary Cross-site scripting has been identified in dojo library shipped with IBM Jazz Reporting Services JRS. JRS has addressed the issues by releasing a fix Vulnerability Details CVEID:CVE-2020-4051 DESCRIPTION: Dijit is vulnerable to cross-site scripting, caused by improper validation of...

Updated dojo packages fix security vulnerability

Dijit Editor's LinkDialog plugin of dojo 1.14.0 to 1.14.7 is vulnerable to cross-site scripting XSS attacks. CVE-2020-4051 Prototype pollution vulnerability via the setObject function. CVE-2021-23450...

[SECURITY] [DLA 3289-1] dojo security update

Debian LTS Advisory DLA-3289-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 28, 2023 https://wiki.debian.org/LTS Package : dojo Version : 1.14.2+dfsg1-1+deb10u3 CVE ID : CVE-2020-4051 CVE-2021-23450 Debian Bug : 970000 1014785 Two vulnerabilities were...

dojox (>=1.15.0, <=1.15.3) potentially affected by CVE-2020-4051 via dijit (>=1.15.0, <=1.15.3)

dijit NPM version =1.15.0, =1.15.0, =1.15.3 Source cves: CVE-2020-4051 Source advisory: OSV:GHSA-CXJC-R2FP-7MQ6...

dojox (>=1.16.0, <=1.16.2) potentially affected by CVE-2020-4051 via dijit (>=1.16.0, <=1.16.2)

dijit NPM version =1.16.0, =1.16.0, =1.16.2 Source cves: CVE-2020-4051 Source advisory: OSV:GHSA-CXJC-R2FP-7MQ6...

bryaktestgrid (>=0.0.1, <=0.0.6), dojo-rql (>=0.1.0, <=0.3.2) +2 more potentially affected by CVE-2020-4051 via dijit (>=1.8.13, <=1.11.10)

dijit NPM version =1.8.13, =0.0.1, =0.1.0, =1.8.13, =0.0.1, =0.5.24 Source cves: CVE-2020-4051 Source advisory: OSV:GHSA-CXJC-R2FP-7MQ6...

@hpcc-js/dgrid-shim (>=0.1.10, <=0.1.12), dojox (>=1.13.0, <=1.13.7) potentially affected by CVE-2020-4051 via dijit (>=1.13.0, <=1.13.7)

dijit NPM version =1.13.0, =0.1.10, =1.13.0, =1.13.7 Source cves: CVE-2020-4051 Source advisory: OSV:GHSA-CXJC-R2FP-7MQ6...