critical9.8
CVE-2018-15494
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
Impact
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dojotoolkit | Dojo | before 1.14 |
| Debian | Debian Linux | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dojotoolkit.org/blog/dojo-1-14-released
- https://github.com/dojo/dojox/pull/283
- https://lists.debian.org/debian-lts-announce/2018/09/msg00002.html
- https://dojotoolkit.org/blog/dojo-1-14-released
- https://github.com/dojo/dojox/pull/283
- https://lists.debian.org/debian-lts-announce/2018/09/msg00002.html