CVE-2007-6726
Summary
| CVE | CVE-2007-6726 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2009-04-09 15:08:00 UTC |
|---|
| Updated | 2017-08-17 01:29:00 UTC |
|---|
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 0.4.3 released: 0.4.2 and 0.4.1 users should upgrade immediately | The Dojo Toolkit |
CONFIRM |
www.dojotoolkit.org |
Patch, Vendor Advisory |
| Dojo Multiple Cross Site Scripting Vulnerabilities |
BID |
www.securityfocus.com |
|
| 0.4.3 Release Notes | The Dojo Toolkit |
CONFIRM |
www.dojotoolkit.org |
Patch, Vendor Advisory |
| 0.4.3 and Updated 0.4.1/0.4.2 Builds | The Dojo Toolkit |
CONFIRM |
www.dojotoolkit.org |
Patch, Vendor Advisory |
| IBM X-Force Exchange |
XF |
exchange.xforce.ibmcloud.com |
|
| [#WW-2134] Upgrade Dojo from 0.4.2 to 0.4.3 to address possible XSS Issues - Apache Struts JIRA |
CONFIRM |
issues.apache.org |
Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 995458 Java (Maven) Security Update for org.apache.struts:struts2-dojo-plugin (GHSA-rm26-w253-9qv7)
