Security Bulletin: Vulnerability in dojo-dojo-release-1.12.1 affects Cloud Pak System [CVE-2018-6561]

Summary Vulnerability in dojo-dojo-release-1.12.1 affects Cloud Pak System. Vulnerability Details CVEID:CVE-2018-6561 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting in dijit.Editor, caused by improper validation of user-supplied input. A remote attacker could exploit this...

ZendFramework1 Potential Security Issues in Bundled Dojo Library

In mid-March, 2010, the Dojo Foundation issued a Security Advisory indicating potential security issues with specific files in Dojo Toolkit. Details of the advisory may be found on the Dojo website: http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ In particular, several file...

GHSA-W5MJ-J45Q-M638 ZendFramework1 Potential Security Issues in Bundled Dojo Library

In mid-March, 2010, the Dojo Foundation issued a Security Advisory indicating potential security issues with specific files in Dojo Toolkit. Details of the advisory may be found on the Dojo website: http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ In particular, several file...

Security Bulletin: IBM Security Verify Governance - Containerized Identity Manager has multiple vulnerabilities

Summary Multiple security vulnerabilities have been addressed in the latest update to IBM Security Verify Governance - Containerized Identity Manager. Vulnerability Details CVEID:CVE-2018-6561 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting in dijit.Editor, caused by improper...

Security Bulletin: IBM Administration Runtime Expert for i is vulnerable to attacker executing arbitrary code on the system due to Dojo (CVE-2021-23450)

Summary IBM Administration Runtime Expert for i uses Dojo to render it's web interface. Dojo 1.3.3 could allow an attacker to execute arbitrary code on the system, as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as describ...

Security Bulletin: Multiple vulnerabilities in Dojo toolkit shipped with IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client

Summary Dojo toolkit is used for UI in IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client. These vulnerabilities are reported in Dojo toolkit CVE-2019-10785, CVE-2018-6561, CVE-2020-4051, CVE-2018-15494, CVE-2020-5259. Vulnerability Details CVEID:CVE-2019-10785 DESCRIPTION:...

Security Bulletin: IBM Security Verify Governance is affected by multiple vulnerabilities

Summary IBM Security Verify Governance uses various components, such as IBM Java, and Dojo. Security vulnerabilities in multiple components have been addressed in the IBM Security Verify Governance update. Vulnerability Details CVEID:CVE-2021-22569 DESCRIPTION: Google Protocol Buffer protobuf-jav...

Security Bulletin: A security vulnerability have been identified in dojo library shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2018-6561)

Summary A security vulnerability have been identified in dojo library shipped with IBM Security Guardium Key Lifecycle Manager SKLM/GKLM CVE-2018-6561 Vulnerability Details CVEID:CVE-2018-6561 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting in dijit.Editor, caused by improper...

Security Bulletin: Mulitple vulnerabilities in Dojo dojox repo may affect IBM Storage Scale

Summary Mulitple vulnerabilities in Dojo dojox repo may affect IBM Storage Scale GUI. Vulnerability Details CVEID:CVE-2020-5259 DESCRIPTION: Dojo dojox could allow a remote attacker to inject arbitrary code on the system, caused by a prototype pollution flaw. By injecting other values, an attacke...

Security Bulletin: Vulnerability for Dojo fixed in IBM Security Verify Governance [CVE-2021-23450]

Summary Security Vulnerability for Dojo component has been fixed in IBM Security Verify Governance CVE-2021-23450 Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: Dojo could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution in the setObject...

CVE-2023-35097

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Internet Marketing Dojo WP Affiliate Links plugin = 0.1.1 versions...

CVE-2023-35097

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Internet Marketing Dojo WP Affiliate Links plugin = 0.1.1 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Internet Marketing Dojo WP Affiliate Links plugin = 0.1.1 versions...

CVE-2023-35097

CVE-2023-35097 affects WP Affiliate Links (Internet Marketing Dojo) plugin for WordPress, specifically versions ≤ 0.1.1. The vulnerability is unauthenticated reflected XSS in the plugin, enabling injection of malicious scripts via user-supplied input. Exploitation status is not detailed in the pr...

PT-2023-25146 · WordPress · Internet Marketing Dojo Wp Affiliate Links

Name of the Vulnerable Software and Affected Versions: Internet Marketing Dojo WP Affiliate Links plugin versions 0.1.1 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites,...

Security Bulletin: Dojo vulnerability affects IBM Financial Transaction Manager for Digital Payments, High Value Payments and Corporate Payment Services [CVE-2021-23450]

Summary A vulnerability in Dojo that could allow arbitrary code execution was addressed. CVE-2021-23450 Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: Dojo could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution in the setObject function. By...

Security Bulletin: IBM Tivoli Business Service Manager is vulnerable to remote code execution due to Dojo (CVE-2021-23450)

Summary Dojo is shipped with IBM Tivoli Business Manager 6.2.0 as part of its UI framework. Information about security vulnerabilities affecting Dojo has been published in a security bulletin. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: Dojo could allow a remote attacker to execute...

Malicious code in dojo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ff9bd8fdb50f834a7cc8a72c7d1a31edae453146ddf2e9358fbde9e4ce3c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-269 Malicious code in dojo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ff9bd8fdb50f834a7cc8a72c7d1a31edae453146ddf2e9358fbde9e4ce3c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the LinkDialog plugin in the module library facilitates the development of JavaScript- or AJAX-based applications and Dojo Toolkit-powered websites. This vulnerability allows attackers to compromise data integrity.

The vulnerability of the LinkDialog plugin from the module library, which facilitates the development of JavaScript- or AJAX-based applications and Dojo Toolkit websites, is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow an attacker to...