Approved changes feed: RSS · Atom

cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenjsf (e371b9eb-ab86-58dc-866f-7af8b12292ef)
ProductDijit (aeb87632-9c85-52f6-9d87-6ae066ab8253)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libjs-dojo-dijit purl2cpe 2026-06-01 10:14:22.315555
pkg:deb/ubuntu/libjs-dojo-dijit purl2cpe 2026-06-01 10:14:22.315558
pkg:github/dojo/dijit purl2cpe 2026-06-01 10:14:22.315561
pkg:maven/org.webjars.npm/dijit purl2cpe 2026-06-01 10:14:22.315564
pkg:npm/dijit purl2cpe 2026-06-01 10:14:22.315566
pkg:nuget/dijit.source purl2cpe 2026-06-01 10:14:22.315569

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4051 vulnerable 2026-06-08 05:25:58.782948 XSS in Dijit Editor's LinkDialog plugin
LOW (3.7)
In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.
Published: 2020-06-15T00:00:00.000Z
Updated: 2024-08-04T07:52:20.806Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.