Prototype Pollution

dojo is vulnerable to prototype pollution. The vulnerability exists in setObject function of lang.js due to lack of object validations which allows an attacker to inject arbitrary object properties which can potentially lead to execution of arbitrary code...

DEBIAN-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

Code injection

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

UBUNTU-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

CVE-2021-23450 describes a Prototype Pollution vulnerability in the Dojo package, exposed via the setObject function. Multiple connected advisories confirm Dojo is affected and note remediation by upgrading to fixed Dojo versions in vendor advisories (IBM, other vendors) and related security bull...

dojo 安全漏洞

dojo is a JavaScript toolkit that contains utilities, UI components, and more. A security vulnerability exists in dojo that stems from the software's susceptibility to Prototype contamination via the setObject function...

PT-2021-7298 · Dojo +3 · Dojo +3

Name of the Vulnerable Software and Affected Versions: dojo versions all Description: The issue is related to the incorrect management of code generation in the dojo library's setObject function. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with...

Security Bulletin: Fix available for Security Vulnerability in IBM WebSphere Portal (CVE-2015-5654)

Summary Security Bulletin: Fix available for Security Vulnerability in IBM WebSphere Portal CVE-2015-5654 Vulnerability Details CVEID: CVE-2015-5654 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could explo...

Security Bulletin: Vulnerability in Dojo may affect IBM Cúram Social Program Management (CVE-2018-15494)

Summary IBM Cúram Social Program Management uses the Dojo libraries, for which there is a publicly known vulnerability. Dojo Toolkit is vulnerable to cross-site scripting attack, caused by improper validation of user-supplied input by the DataGrid component. Vulnerability Details CVEID:...

Security Bulletin: XSS vulerability in Dojo affects IBM Tivoli Business Service Manager (CVE-2018-15494)

Summary Dojo Toolkit is shipped as part of IBM Tivoli Business Manager 6.2.0. Information about security vulnerabilities affecting Dojo Toolkit has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting,...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Dojo Toolkit (CVE-2018-15494)

Summary A vulnerability in Dojo Toolkit that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the DataGrid component. A...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2020-5258)

Summary IBM WebSphere Application Server WAS is used by the IBM Rational ClearQuest server and web components. Information about security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Vulnerability fixed in IBM WebSphere

A vulnerability has been fixed in the Dojo library used used by WebSphere Application Server. By exploiting this vulnerability, a remote malicious person may be able to inject arbitrary code onto the system. IBM has released updates to fix the vulnerabilities. More information can be found on the...

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager Virtual Appliance (CVE-2018-15494)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerability due to remote attcker's ability to exploit this vulnerability. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper...

Security Bulletin: Vulnerability in Dojo affects WebSphere Application Server (CVE-2020-5258)

Summary There is a vulnerability in the Dojo library used by WebSphere Application Server. This has been addressed. Vulnerability Details CVEID: CVE-2020-5258 DESCRIPTION: Dojo dojo could allow a remote attacker to inject arbitrary code on the system, caused by a prototype pollution flaw. By...

Security Bulletin: IBM Cloud Private is vulnerable to Dojo vulnerabilities (CVE-2020-5258)

Summary IBM Cloud Private is vulnerable to Dojo vulnerabilities Vulnerability Details CVEID: CVE-2020-5258 DESCRIPTION: Dojo dojo could allow a remote attacker to inject arbitrary code on the system, caused by a prototype pollution flaw. By injecting other values, an attacker could exploit this...

Security Bulletin: Vulnerability in Dojo may affect Cúram Social Program Management (CVE-2020-5258)

Summary IBM Cúram Social Program Management uses the Dojo libraries, for which there is a publicly known vulnerability. For this vulnerability Dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing...