Login Request a demo
DO
Product
Dojo
by Dojotoolkit · last CVE Sep 6, 2018
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities11Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dojo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-15494
9.8
3%
Aug 18
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid
Affected: before 1.14
CVE-2018-1000665
6.1
1%
Sep 6
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and…
Affected: through 1.13.0
CVE-2018-6561
6.1
1%
Feb 2
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element
Affected: 1.13.0
CVE-2015-5654
–
2%
Oct 11
Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: through 1.1.1
CVE-2010-2276
–
3%
Jun 15
The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2…
Affected: 0.4.0; 0.4.1; 0.4.2; 0.4.3; 1.0; 1.0.1; +12 more
CVE-2010-2275
–
3%
Jun 15
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the…
Affected: through 1.4.1; 0.1.0; 0.2.0; 0.2.1; 0.2.2; 0.3.0; +20 more
CVE-2010-2274
–
2%
Jun 15
Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to…
Affected: 1.0; 1.0.1; 1.0.2; 1.1; 1.1.1; 1.2; +8 more
CVE-2010-2273
–
5%
Jun 15
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote…
Affected: 1.0; 1.0.1; 1.0.2; 1.1; 1.1.1; 1.2; +8 more
CVE-2010-2272
–
1%
Jun 15
Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors
Affected: 0.4.0; 0.4.1; 0.4.2; 0.4.3
CVE-2008-6681
–
1%
Apr 9
Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element
Affected: through 1.0; 0.1.0; 0.2.0; 0.2.1; 0.2.2; 0.3.0; +6 more
CVE-2007-6726
–
3%
Apr 9
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or…
Affected: 0.4.1; 0.4.2
Showing 11