Approved changes feed: RSS · Atom
cpe:2.3:a:dojotoolkit:dojo:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Dojotoolkit (553b5e07-9688-5335-9fea-ebc2304e1728) |
|---|---|
| Product | Dojo (423e4b3e-fa4f-5e5e-b793-bc0241d51cf0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/dojo |
purl2cpe | 2026-06-01 10:15:44.661306 |
pkg:deb/ubuntu/dojo |
purl2cpe | 2026-06-01 10:15:44.661309 |
pkg:github/dojo/framework |
purl2cpe | 2026-06-01 10:15:44.661312 |
pkg:maven/org.dojotoolkit/dojo |
purl2cpe | 2026-06-01 10:15:44.661315 |
pkg:npm/dojo |
purl2cpe | 2026-06-01 10:15:44.661318 |
pkg:nuget/dojo |
purl2cpe | 2026-06-01 10:15:44.661320 |
pkg:rpm/fedora/dojo |
purl2cpe | 2026-06-01 10:15:44.661323 |
pkg:rpm/opensuse/dojo |
purl2cpe | 2026-06-01 10:15:44.661326 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-15494 |
vulnerable | 2026-06-08 05:10:54.559306 |
Details available
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
Published: 2018-08-18T02:00:00.000Z
Updated: 2024-08-05T09:54:03.539Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000665 |
vulnerable | 2026-06-08 05:10:25.942710 |
Details available
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. This attack appear to be exploitable via Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. This vulnerability appears to have been fixed in 1.14.
Published: 2018-09-06T17:00:00.000Z
Updated: 2024-09-17T01:00:37.528Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5654 |
vulnerable | 2026-06-08 05:06:50.662727 |
Details available
Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-10-11T01:00:00.000Z
Updated: 2024-08-06T06:59:03.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2275 |
vulnerable | 2026-06-08 04:55:06.466883 |
Details available
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.
Published: 2010-06-14T19:00:00.000Z
Updated: 2024-09-16T17:03:04.635Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6681 |
vulnerable | 2026-06-08 04:51:04.560260 |
Details available
Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.
Published: 2009-04-09T15:00:00.000Z
Updated: 2024-08-07T11:42:00.160Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.