CVE-2018-15494
Fixed in a distro release EPSS 3%
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
Products: dojotoolkit dojo, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | dojox | 1.14.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dojo | 1.14.1+dfsg1-1 |
| Debian 13 | dojo | 1.14.1+dfsg1-1 |
| Debian 14 | dojo | 1.14.1+dfsg1-1 |
| Debian 8 | dojo | 1.10.2+dfsg-1+deb8u1 |
| Ubuntu 18.04 LTS | dojo | no fix |
| Ubuntu 22.04 LTS | dojo | 1.15.4+dfsg1-1ubuntu0.1 |
| Ubuntu Pro 16.04 LTS | dojo | 1.10.4+dfsg-2ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | dojo | 1.15.0+dfsg1-1ubuntu0.1~esm1 |