CVEvulnerability
CVE-2010-2276
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-16
Description
The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact via a request to a (1) test or (2) demo component.
Affected configurations
• dojotoolkit dojo 0.4.0
• dojotoolkit dojo 0.4.1
• dojotoolkit dojo 0.4.2
• dojotoolkit dojo 0.4.3
• dojotoolkit dojo 1.0
• dojotoolkit dojo 1.0.1
• dojotoolkit dojo 1.0.2
• dojotoolkit dojo 1.1
• dojotoolkit dojo 1.1.1
• dojotoolkit dojo 1.2
• dojotoolkit dojo 1.2.1
• dojotoolkit dojo 1.2.2
• dojotoolkit dojo 1.2.3
• dojotoolkit dojo 1.3
• dojotoolkit dojo 1.3.1
• dojotoolkit dojo 1.3.2
• dojotoolkit dojo 1.4
• dojotoolkit dojo 1.4.1
Related
Weakness · not in database (1)
References
- http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ Patch, Vendor Advisory
- http://secunia.com/advisories/38964 Vendor Advisory
- http://secunia.com/advisories/40007 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472 www-01.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 www-1.ibm.com
- http://www.vupen.com/english/advisories/2010/1281 Vendor Advisory
- http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ Patch, Vendor Advisory
- http://secunia.com/advisories/38964 Vendor Advisory
- http://secunia.com/advisories/40007 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472 www-01.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 www-1.ibm.com
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 www-1.ibm.com
- http://www.vupen.com/english/advisories/2010/1281 Vendor Advisory