Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-5654
HistoryOct 11, 2015 - 12:00 a.m.

CVE-2015-5654

2015-10-1100:00:00
ubuntu.com
ubuntu.com
13

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows
remote attackers to inject arbitrary web script or HTML via unspecified
vectors.

Notes

Author Note
sbeattie supposedly fixed in 1.2?

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%