PT-2024-40493 · Dojo Foundation · Dojo Toolkit

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Dojo Toolkit (affected versions not specified)

Description A security advisory was issued by the Dojo Foundation in mid-March 2010, indicating potential security issues with specific files in the Dojo Toolkit. The advisory suggests that several files in the Dojo tree may have potential exploits.

Recommendations Disable or remove any PHP scripts in the Dojo tree when deploying to production. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-W5MJ-J45Q-M638

Affected Products

Dojo Toolkit

References · 5

• https://osv.dev/vulnerability/GHSA-w5mj-j45q-m638 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2010-07.yaml · Note
• https://github.com/zendframework/zf1 · Note
• https://web.archive.org/web/20210509072723/https://framework.zend.com/security/advisory/ZF2010-07 · Note
• http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory · Note