Cross-site Scripting (XSS)

🗓️ 05 Feb 2018 01:06:02Reported by Veracode Vulnerability DatabaseType

dijit vulnerability to Cross-site Scripting (XSS) attack

Reporter	Title	Published	Views	Family All 19
IBM Security Bulletins	Security Bulletin: Vulnerability in dojo-dojo-release-1.12.1 affects Cloud Pak System [CVE-2018-6561]	1 Aug 202413:02	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability have been identified in dojo library shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2018-6561)	1 Sep 202313:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance - Containerized Identity Manager has multiple vulnerabilities	25 Apr 202405:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Dojo toolkit shipped with IBM WebSphere eXtreme Scale Liberty Deployment and eXtremescale Client	19 Apr 202411:29	–	ibm
CNVD	Dojo Toolkit Cross-Site Scripting Vulnerability	7 Feb 201800:00	–	cnvd
CVE	CVE-2018-6561	2 Feb 201815:00	–	cve
Cvelist	CVE-2018-6561	2 Feb 201815:00	–	cvelist
Debian CVE	CVE-2018-6561	2 Feb 201815:00	–	debiancve
EUVD	EUVD-2022-5607	3 Oct 202520:07	–	euvd
Github Security Blog	dijit editor cross-site scripting vulnerability	14 May 202203:44	–	github

Vulners

Node

openjsf dijitRange1.12.2–1.13.0js

openjsf dijitRange1.10.4–1.13.0js

openjsf dijitMatch1.13.0js

openjsf dijitRange1.11.0–1.11.10js

openjsf dijitRange1.12.0–1.12.8js

openjsf dijitRange1.6.4–1.10.7js

openjsf dijitMatch1.13.0js

openjsf dijitRange0.0.0test–1.11.9js

openjsf dijitRange1.12.0-rc1–1.12.7js

openjsf dijitMatch1.1.1-maenjs

dojotoolkit dojoRange1.6.1–1.10.4js

Source	Link
github	www.github.com/dojo/dijit/pull/146
github	www.github.com/imsebao/404team/blob/master/dijit_editor_xss.md
github	www.github.com/dojo/dijit/commit/9bed588a5439d27958ea49196ff5ac6ec95539c8

05 Nov 2020 06:04Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00199