GHSA-cxjc-r2fp-7mq6LowCVSS 3.7
Cross-site Scripting in dijit editor's LinkDialog plugin
🔗 CVE IDs covered (1)
📋 Description
Impact
XSS possible for users of the Dijit Editor's LinkDialog plugin
Patches
Yes, 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3
Workarounds
Users may apply the patch made in these releases.
For more information
If you have any questions or comments about this advisory, open an issue in dojo/dijit
🎯 Affected products6
- npm/dijit:< 1.11.11
- npm/dijit:>= 1.12.0, < 1.12.9
- npm/dijit:>= 1.13.0, < 1.13.8
- npm/dijit:>= 1.14.0, < 1.14.7
- npm/dijit:>= 1.15.0, < 1.15.4
- npm/dijit:>= 1.16.0, < 1.16.3
🔗 References (7)
- https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6
- https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301
- https://nvd.nist.gov/vuln/detail/CVE-2020-4051
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://security.netapp.com/advisory/ntap-20201023-0003/
- https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html
- https://github.com/advisories/GHSA-cxjc-r2fp-7mq6