npm/dojo CVE-2010-2273: medium, EPSS 4.54%
Cross-Site Scripting in dojo
Action: Upgrade dojo to 1.10.10 or later.
npm i dojo@1.13.1npm i dojo@1.12.4npm i dojo@1.11.6npm i dojo@1.10.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.13.0 | 1.13.1 | - |
| 1.12.0 | 1.12.4 | - |
| 1.11.0 | 1.11.6 | - |
| 1.10.0 | 1.10.10 | - |
Fixed versions
| 1.13.1 | 1.12.4 | 1.11.6 | 1.10.10 |
Sources
- osv: GHSA-536q-8gxx-m782
- https://nvd.nist.gov/vuln/detail/CVE-2010-2273
- https://github.com/dojo/dojo/pull/307
- https://github.com/dojo/dojo/commit/9117ffd5a3863e44c92fcd58564c0da22be858f4
- https://bugs.dojotoolkit.org/ticket/10773
- https://www.npmjs.com/advisories/972
- http://bugs.dojotoolkit.org/ticket/10773
- http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory
- http://secunia.com/advisories/38964
- http://secunia.com/advisories/40007
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994
- http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk
- http://www.vupen.com/english/advisories/2010/1281
CVE-2010-2273 · published · modified · JSON