GitHub Advisoryadvisory · Maven
GHSA-mmjh-45vj-hfvf Dojo Open Redirect vulnerability
MEDIUM
Official page ↗
- Aliases
- CVE-2010-2274
- Ecosystem
- Maven
- Packages
- org.dojotoolkit:dojo
- Severity
- Moderate
- Weaknesses
- CWE-601
- Reviewed
- 2024-02-08
Affected packages
• Maven org.dojotoolkit:dojo: >= 1.0.0, < 1.0.3 → fixed in 1.0.3
• Maven org.dojotoolkit:dojo: >= 1.1.0, < 1.1.2 → fixed in 1.1.2
• Maven org.dojotoolkit:dojo: >= 1.2.0, < 1.2.4 → fixed in 1.2.4
• Maven org.dojotoolkit:dojo: >= 1.3.0, < 1.3.3 → fixed in 1.3.3
• Maven org.dojotoolkit:dojo: >= 1.4.0, < 1.4.2 → fixed in 1.4.2
Description
Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.
Related
Alias · CVE (1)
- CVE-2010-2274 Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x… vulnerability
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2010-2274 advisory
- https://github.com/cometd/dojo-maven package
- https://web.archive.org/web/20100617172214/http://secunia.com/advisories/40007 web
- https://web.archive.org/web/20100629020444/http://secunia.com/advisories/38964 web
- http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory web
- http://www-01.ibm.com/support/docview.wss?uid=swg21431472 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 web
- http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 web