Home

CVE-2018-15494

Description

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.64

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.2.1Windows
Modular JavaScript library (USN-7569-1) libjs-dojo-core_1.15.4+dfsg1-1ubuntu0.1_all.debLinux
Modular JavaScript library (USN-7569-1) libjs-dojo-dijit_1.15.4+dfsg1-1ubuntu0.1_all.debLinux
Modular JavaScript library (USN-7569-1) libjs-dojo-dojox_1.15.4+dfsg1-1ubuntu0.1_all.debLinux
Modular JavaScript library (USN-7569-1) shrinksafe_1.15.4+dfsg1-1ubuntu0.1_all.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234