{"action":"Upgrade dojo to 1.10.10 or later.","affected":[{"fixed":"1.13.1","introduced":"1.13.0"},{"fixed":"1.12.4","introduced":"1.12.0"},{"fixed":"1.11.6","introduced":"1.11.0"},{"fixed":"1.10.10","introduced":"1.10.0"}],"component":"dojo","cve_ids":["CVE-2010-2273"],"ecosystem":"npm","epss":0.04545,"exploited":false,"fixed_versions":["1.13.1","1.12.4","1.11.6","1.10.10"],"ghsa_id":"GHSA-536q-8gxx-m782","id":"tcs_01M5KF2BPKRTMTM4ECJFB47CS6","modified_at":"2023-11-08T03:56:56.454372Z","published_at":"2019-09-11T23:02:57Z","references":["https://osv.dev/vulnerability/GHSA-536q-8gxx-m782","https://nvd.nist.gov/vuln/detail/CVE-2010-2273","https://github.com/dojo/dojo/pull/307","https://github.com/dojo/dojo/commit/9117ffd5a3863e44c92fcd58564c0da22be858f4","https://bugs.dojotoolkit.org/ticket/10773","https://www.npmjs.com/advisories/972","http://bugs.dojotoolkit.org/ticket/10773","http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory","http://secunia.com/advisories/38964","http://secunia.com/advisories/40007","http://www-01.ibm.com/support/docview.wss?uid=swg21431472","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958","http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994","http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk","http://www.vupen.com/english/advisories/2010/1281"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-536q-8gxx-m782","url":"https://osv.dev/vulnerability/GHSA-536q-8gxx-m782"}],"summary":"Cross-Site Scripting in dojo"}