CVE-2010-2276 The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dojotoolkit dojo | = 0.4.0 | No fix listed |
| dojotoolkit dojo | = 0.4.1 | No fix listed |
| dojotoolkit dojo | = 0.4.2 | No fix listed |
| dojotoolkit dojo | = 0.4.3 | No fix listed |
| dojotoolkit dojo | = 1.0 | No fix listed |
| dojotoolkit dojo | = 1.0.1 | No fix listed |
| dojotoolkit dojo | = 1.0.2 | No fix listed |
| dojotoolkit dojo | = 1.1 | No fix listed |
| dojotoolkit dojo | = 1.1.1 | No fix listed |
| dojotoolkit dojo | = 1.2 | No fix listed |
| dojotoolkit dojo | = 1.2.1 | No fix listed |
| dojotoolkit dojo | = 1.2.2 | No fix listed |
| dojotoolkit dojo | = 1.2.3 | No fix listed |
| dojotoolkit dojo | = 1.3 | No fix listed |
| dojotoolkit dojo | = 1.3.1 | No fix listed |
| dojotoolkit dojo | = 1.3.2 | No fix listed |
| dojotoolkit dojo | = 1.4 | No fix listed |
| dojotoolkit dojo | = 1.4.1 | No fix listed |
References
- dojotoolkit.org patch vendor-advisory
- 38964 third-party-advisory vendor-advisory
- 40007 third-party-advisory vendor-advisory
- www-01.ibm.com
- LO50833 vendor-advisory
- LO50849 vendor-advisory
- LO50856 vendor-advisory
- LO50896 vendor-advisory
- LO50932 vendor-advisory
- LO50958 vendor-advisory
- LO50994 vendor-advisory
- ADV-2010-1281 vdb-entry vendor-advisory
- Debian Security Tracker CVE-2010-2276 vendor-advisory