CVE-2008-6681: XSS
Affected versions of dojo are susceptible to a cross-site scripting vulnerability in the dijit.Editor and textarea components, which execute their contents as Javascript, even when sanitized.
Recommendation
Update to version 1.1.0 or later.
Other sources
Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6681?
CVE-2008-6681 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2008-6681?
To fix CVE-2008-6681, update your Dojo version to 1.1.0 or later.
Which versions of Dojo are affected by CVE-2008-6681?
CVE-2008-6681 affects Dojo versions prior to 1.1.0, including versions 0.1.0 to 0.9.0.
What type of vulnerability is CVE-2008-6681?
CVE-2008-6681 is a cross-site scripting (XSS) vulnerability.
What components of Dojo are impacted by CVE-2008-6681?
The affected components of Dojo in CVE-2008-6681 include dijit.Editor and textarea.