CVE-2010-2272

概要

参考情報

• dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory · Patch
• secunia.com/advisories/38964 · Vendor Advisory

dojo のその他の脆弱性

• CVE-2018-1000665中 6.1Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDO…
• CVE-2018-15494緊急 9.8In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
• CVE-2018-6561中 6.1dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
• CVE-2015-5654中 4.3Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspe…
• CVE-2010-2276緊急 10.0The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x…