GHSA-84cm-x2q5-8225
dojox vulnerable to unescaped string injection
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2018-15494
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In Dojo Toolkit before 1.14.0, there is unescaped string injection in dojox/Grid/DataGrid.
Paquets affectés
| Paquet | Versions |
|---|---|
| npm · dojox | introduced 0, fixed 1.14.0 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2018-15494 ADVISORY
- https://github.com/dojo/dojox/pull/283 WEB
- https://dojotoolkit.org/blog/dojo-1-14-released WEB
- https://github.com/advisories/GHSA-84cm-x2q5-8225 ADVISORY
- https://github.com/dojo/dojox PACKAGE
- https://lists.debian.org/debian-lts-announce/2018/09/msg00002.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |