Dojo@0.4.2 Security Vulnerabilities and Issues — Dojo@0.4.2 CVE List

Lucene search

DojotoolkitDojo0.4.2

3 matches found

CVE•added 2010/06/15 2:30 p.m.•114 views

CVE-2010-2276

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact v...

10CVSS6.7AI score0.03514EPSS

CVE•added 2010/06/15 2:30 p.m.•74 views

CVE-2010-2275

Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.

4.3CVSS5.7AI score0.16214EPSS

CVE•added 2010/06/15 2:30 p.m.•40 views

CVE-2010-2272

Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors.

10CVSS6.6AI score0.00462EPSS