PT-2010-3858 · Dojo · Dojo

Publicado 2010-06-14 · Atualizado 2010-06-16 · CVE-2010-2272

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dojo versions 0.4.x through 0.4.3

Description The issue concerns an unspecified vulnerability in the iframe history.html component of Dojo. It has unknown impact and can be exploited remotely.

Recommendations For Dojo versions 0.4.x through 0.4.3, update to version 0.4.4 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-2272

Produtos afetados

Dojo

Referências · 4

• http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2272 · Nota de Segurança
• http://secunia.com/advisories/38964 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2272 · Nota