CVEvulnerability

CVE-2020-4051

5.4 MEDIUM Published 2020-06-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.

Affected configurations

• openjsf dijit (< 1.11.11) • openjsf dijit (>= 1.12.0 < 1.12.9) • openjsf dijit (>= 1.13.0 < 1.13.8) • openjsf dijit (>= 1.14.0 < 1.14.7) • openjsf dijit (>= 1.15.0 < 1.15.4) • openjsf dijit (>= 1.16.0 < 1.16.3) • debian debian linux 10.0 • netapp active iq unified manager • netapp oncommand insight • netapp oncommand workflow automation • netapp snapcenter

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References