Lucene search
Veracode Vulnerability DatabaseVERACODE:7831HistoryNov 16, 2018 - 8:31 a.m.
Cross-Site Scripting (XSS)
2018-11-1608:31:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.003 Low
EPSS
Percentile
65.5%
Dojo Toolkit is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim’s browser to steal session tokens or perform unwanted actions on behalf of a user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dojo | le | 1.2.0rc2 | |
| dojo | eq | 1.1.1-maen |
Related
cvelist
cvelist
CVE-2015-5654
2015-10-11 01:00:00
github
github
Cross-Site Scripting in dojo
2020-09-11 21:18:05
jvn
jvn
JVN#13456571: Dojo Toolkit vulnerable to cross-site scripting
2015-10-09 00:00:00
debiancve
debiancve
CVE-2015-5654
2015-10-11 01:59:03
ibm
ibm
nvd
nvd
CVE-2015-5654
2015-10-11 01:59:03
cve
cve
CVE-2015-5654
2015-10-11 01:59:03
ubuntucve
ubuntucve
CVE-2015-5654
2015-10-11 00:00:00
nodejs
nodejs
Cross-Site Scripting
2019-06-17 14:14:37
osv
osv
Cross-Site Scripting in dojo
2020-09-11 21:18:05
prion
prion
Cross site scripting
2015-10-11 01:59:00