GHSA-cxjc-r2fp-7mq6
Cross-site Scripting in dijit editor's LinkDialog plugin
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2020-4051
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Description
### Impact XSS possible for users of the Dijit Editor's LinkDialog plugin ### Patches Yes, 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3 ### Workarounds Users may apply the patch made in these releases. ### For more information If you have any questions or comments about this advisory, open an issue in [dojo/dijit](https://github.com/dojo/dijit/)
Paquets affectés
| Paquet | Versions |
|---|---|
| npm · dijit | introduced 0, fixed 1.11.11 |
| npm · dijit | introduced 1.12.0, fixed 1.12.9 |
| npm · dijit | introduced 1.13.0, fixed 1.13.8 |
| npm · dijit | introduced 1.14.0, fixed 1.14.7 |
| npm · dijit | introduced 1.15.0, fixed 1.15.4 |
| npm · dijit | introduced 1.16.0, fixed 1.16.3 |
Références
- https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6 WEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-4051 ADVISORY
- https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301 WEB
- https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html WEB
- https://security.netapp.com/advisory/ntap-20201023-0003 WEB
- https://www.oracle.com/security-alerts/cpuoct2020.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |