CVE-2015-5654: XSS
Published Oct 11, 2015
·Updated
Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
1 affected component
Dojotoolkit Dojo<=1.1.1
Event History
Oct 11, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5654?
CVE-2015-5654 has a medium severity rating as it allows for cross-site scripting attacks.
2
How do I fix CVE-2015-5654?
To fix CVE-2015-5654, upgrade to Dojo Toolkit version 1.2 or later.
3
Which versions of Dojo Toolkit are affected by CVE-2015-5654?
CVE-2015-5654 affects all Dojo Toolkit versions prior to 1.2.
4
Can attackers exploit CVE-2015-5654 remotely?
Yes, CVE-2015-5654 allows remote attackers to inject arbitrary web scripts.
5
What types of attacks can CVE-2015-5654 facilitate?
CVE-2015-5654 facilitates cross-site scripting (XSS) attacks.