GCVE - cpe:2.3:a:dojotoolkit:dojo:0.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dojotoolkit:dojo:0.4.0:*:*:*:*:*:*:*

part: a version: 0.4.0 update: *

Vendor	Dojotoolkit (`553b5e07-9688-5335-9fea-ebc2304e1728`)
Product	Dojo (`423e4b3e-fa4f-5e5e-b793-bc0241d51cf0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/dojo`	purl2cpe	2026-06-01 10:15:44.671281
`pkg:deb/ubuntu/dojo`	purl2cpe	2026-06-01 10:15:44.671283
`pkg:github/dojo/framework`	purl2cpe	2026-06-01 10:15:44.671284
`pkg:maven/org.dojotoolkit/dojo`	purl2cpe	2026-06-01 10:15:44.671286
`pkg:npm/dojo`	purl2cpe	2026-06-01 10:15:44.671287
`pkg:nuget/dojo`	purl2cpe	2026-06-01 10:15:44.671289
`pkg:rpm/fedora/dojo`	purl2cpe	2026-06-01 10:15:44.671290
`pkg:rpm/opensuse/dojo`	purl2cpe	2026-06-01 10:15:44.671291

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2276`	vulnerable	2026-06-08 04:55:06.476244	Details available The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-17T00:16:42.080Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1281 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2275`	vulnerable	2026-06-08 04:55:06.472410	Details available Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-16T17:03:04.635Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1281 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 http://bugs.dojotoolkit.org/ticket/10773 http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2272`	vulnerable	2026-06-08 04:55:06.436707	Details available Unspecified vulnerability in iframe_history.html in Dojo 0.4.x before 0.4.4 has unknown impact and remote attack vectors. Published: 2010-06-14T19:00:00.000Z Updated: 2024-09-17T01:16:18.247Z Open on db.gcve.eu Reference links http://secunia.com/advisories/38964 http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6681`	vulnerable	2026-06-08 04:51:04.564712	Details available Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element. Published: 2009-04-09T15:00:00.000Z Updated: 2024-08-07T11:42:00.160Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/49883 http://www.securityfocus.com/bid/34661 http://www.dojotoolkit.org/book/dojo-1-1-release-notes http://trac.dojotoolkit.org/ticket/2140	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Dojo

Notes

PURL mappings

Vulnerability references

Contribute