Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia: 2020-0126 Moderate: Dojo Cross-Site Scripting Threat

mageia
Calendar Grey March 6, 2020
Dist Mageia Esm H88
Fedora 2021-0312 updates nano software to address Denial of Service vulnerability. Release date: 15 Apr 2021.
Updated dojo package fixes security vulnerability: dojox was vulnerable to Cross-site Scripting

Summary

Updated dojo package fixes security vulnerability:
dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them (CVE-2019-10785).

References

- https://bugs.mageia.org/show_bug.cgi?id=26287

- https://lists.debian.org/debian-lts-announce/2020/02/msg00033.html

- https://www.cve.org/CVERecord?id=CVE-2019-10785

Topics%20covered

Topics Covered

security advisory update cross-site scripting fix Mageia dojo

Resolution

SRPMS

- 7/core/dojo-1.14.5-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0126.html
Type: security
CVE: CVE-2019-10785

Topics%20covered

Topics Covered

security advisory update cross-site scripting fix Mageia dojo

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here