CVE-2010-2273
Summary
| CVE | CVE-2010-2273 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2010-06-15 14:30:00 UTC |
|---|
| Updated | 2010-06-16 04:00:00 UTC |
|---|
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, and util/buildscripts/jslib/buildUtil.js, as demonstrated by the (1) dojoUrl and (2) testUrl parameters to util/doh/runner.html. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH |
VUPEN |
www.vupen.com |
Vendor Advisory |
| #10773 (Multiple DOM-Based XSS in Dojo Toolkit SDK)
– Dojo Toolkit |
CONFIRM |
bugs.dojotoolkit.org |
Exploit |
| LO50958: DOJO SECURITY PATCH AFFECTING DOJO 1.1.1, 1.1.0 AND 1.2.3 |
AIXAPAR |
www-1.ibm.com |
|
| LO50856: DOJO SECURITY PATCH AFFECTING DOJO 1.1.1, 1.1.0 AND 1.2.3 |
AIXAPAR |
www-1.ibm.com |
|
| Dojo Toolkit Redirection Weaknesses and Cross-Site Scripting - Advisories - Community |
SECUNIA |
secunia.com |
Vendor Advisory |
| LO50896: DOJO SECURITY PATCH AFFECTING DOJO 1.1.1, 1.1.0 AND 1.2.3 |
AIXAPAR |
www-1.ibm.com |
|
| IBM Fix List and installation instructions for Lotus Connections 2.5.0 Fix Pack 2 (2.5.0.2) - United States |
CONFIRM |
www-01.ibm.com |
|
| Multiple DOM-Based XSS in Dojo Toolkit SDK -
Gotham Digital Science |
MISC |
www.gdssecurity.com |
Exploit |
| IBM notice: The page you requested cannot be displayed |
AIXAPAR |
www-1.ibm.com |
|
| Page not found | The Dojo Toolkit Blog |
CONFIRM |
dojotoolkit.org |
Patch, Vendor Advisory |
| LO50994: DOJO SECURITY PATCH AFFECTING DOJO 1.1.1, 1.1.0 AND 1.2.3 |
AIXAPAR |
www-1.ibm.com |
|
| IBM Lotus Connections Multiple Vulnerabilities - Advisories - Community |
SECUNIA |
secunia.com |
Vendor Advisory |
| LO50849: DOJO SECURITY PATCH AFFECTING DOJO 1.1.1, 1.1.0 AND 1.2.3 |
AIXAPAR |
www-1.ibm.com |
|
| LO50833: DOJO SECURITY PATCH AFFECTING DOJO 1.1.1, 1.1.0 AND 1.2.3 |
AIXAPAR |
www-1.ibm.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 981653 Nodejs (npm) Security Update for dojo (GHSA-536q-8gxx-m782)
