Cross-site Scripting in dijit editor's LinkDialog plugin
### Impact XSS possible for users of the Dijit Editor's LinkDialog plugin ### Patches Yes, 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3 ### Workarounds Users may apply the patch made in these releases. ### For more information If you have any questions or comments about this advisory, open an issue in [dojo/dijit](https://github.com/dojo/dijit/)
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-4051US | medium5.4 | — | ||
In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301WEB
- https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6WEB
- https://lists.debian.org/debian-lts-announce/2023/01/msg00030.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-4051ADVISORY
- https://security.netapp.com/advisory/ntap-20201023-0003WEB
- https://www.oracle.com/security-alerts/cpuoct2020.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan