GitHub Advisoryadvisory · Maven

GHSA-mmjh-45vj-hfvf Dojo Open Redirect vulnerability

MEDIUM Published 2022-05-17 Modified 2024-02-08 Official page ↗
Aliases
CVE-2010-2274
Ecosystem
Maven
Packages
org.dojotoolkit:dojo
Severity
Moderate
Weaknesses
CWE-601
Reviewed
2024-02-08

Affected packages

• Maven org.dojotoolkit:dojo: >= 1.0.0, < 1.0.3 → fixed in 1.0.3 • Maven org.dojotoolkit:dojo: >= 1.1.0, < 1.1.2 → fixed in 1.1.2 • Maven org.dojotoolkit:dojo: >= 1.2.0, < 1.2.4 → fixed in 1.2.4 • Maven org.dojotoolkit:dojo: >= 1.3.0, < 1.3.3 → fixed in 1.3.3 • Maven org.dojotoolkit:dojo: >= 1.4.0, < 1.4.2 → fixed in 1.4.2

Description

Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.

Related

Alias · CVE (1)

  • CVE-2010-2274 Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References