GHSA-cxjc-r2fp-7mq6
Suggest an improvement- Source
- https://github.com/advisories/GHSA-cxjc-r2fp-7mq6
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/06/GHSA-cxjc-r2fp-7mq6/GHSA-cxjc-r2fp-7mq6.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-cxjc-r2fp-7mq6
- Aliases
- Published
- 2020-06-15T21:53:12Z
- Modified
- 2023-11-01T05:17:47.469114Z
- Severity
-
- 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
- Summary
- Cross-site Scripting in dijit editor's LinkDialog plugin
- Details
-
Impact
XSS possible for users of the Dijit Editor's LinkDialog plugin
Patches
Yes, 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3
Workarounds
Users may apply the patch made in these releases.
For more information
If you have any questions or comments about this advisory, open an issue in dojo/dijit
- Database specific
{ "nvd_published_at": "2020-06-15T22:15:00Z", "cwe_ids": [ "CWE-79" ], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2020-06-15T21:52:48Z" }- References
-
- https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6
- https://nvd.nist.gov/vuln/detail/CVE-2020-4051
- https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301
- https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html
- https://security.netapp.com/advisory/ntap-20201023-0003
- https://www.oracle.com/security-alerts/cpuoct2020.html
Affected packages
npm / dijit
Package
- Name
- dijit
- View open source insights on deps.dev
- Purl
- pkg:npm/dijit
npm / dijit
Package
- Name
- dijit
- View open source insights on deps.dev
- Purl
- pkg:npm/dijit
npm / dijit
Package
- Name
- dijit
- View open source insights on deps.dev
- Purl
- pkg:npm/dijit
npm / dijit
Package
- Name
- dijit
- View open source insights on deps.dev
- Purl
- pkg:npm/dijit
npm / dijit
Package
- Name
- dijit
- View open source insights on deps.dev
- Purl
- pkg:npm/dijit
npm / dijit
Package
- Name
- dijit
- View open source insights on deps.dev
- Purl
- pkg:npm/dijit