2 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-5259
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties...
8.6CVSS6.7AI score0.02018EPSS
SaveExploits1References2
Cross-site Scripting (XSS)
Overview dojox is a dojo extension, a rollup of many useful sub-projects and varying states of maturity, from very stable and robust, to alpha and experimental. Affected versions of this package are vulnerable to Cross-site Scripting XSS. dojox.xmpp.util.xmlEncode only encodes the first occurrenc...
7.3CVSS8.3AI score0.01845EPSS
SaveExploits1References2
20