CVE-2008-6681

描述

Affected versions of `dojo` are susceptible to a cross-site scripting vulnerability in the `dijit.Editor` and `textarea` components, which execute their contents as Javascript, even when sanitized. ## Recommendation Update to version 1.1.0 or later.

如何修補 CVE-2008-6681

要修補 CVE-2008-6681,請將受影響套件升級到下列已修補版本。

• npm/dojo—升級至 1.1.0 或更新版本

CVE-2008-6681 正在被利用嗎?

低 — EPSS 為 1.1%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.1.0

參考連結(8)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2008-6681
• WEBtrac.dojotoolkit.org/changeset/15346
• WEBtrac.dojotoolkit.org/ticket/2140
• WEBwww.dojotoolkit.org/book/dojo-1-1-release-notes
• WEBwww.securityfocus.com/bid/34661