org.dojotoolkit vulnerabilities

Products

• org.dojotoolkit/dojo 2

Latest org.dojotoolkit CVEs

Newest publication first

1. CVE-2018-1000665 Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

   Published 2018-09-06

   Medium·CVSS 6.1 EPSS 1.1%

   Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked throug...

2. CVE-2010-2274 Dojo Open Redirect vulnerability

   Published 2010-06-14

   Medium·CVSS 4.3 EPSS 1.9%

   Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly rel...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.