CVE-2019-10785: XSS
dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10785?
CVE-2019-10785 is a vulnerability in dojox, which allows for cross-site scripting (XSS) attacks.
How does CVE-2019-10785 impact IBM Security Guardium?
IBM Security Guardium versions 10.5 to 11.3 are affected by CVE-2019-10785, potentially allowing for XSS attacks.
What is the severity of CVE-2019-10785?
CVE-2019-10785 has a severity rating of 6.1, indicating a medium impact.
How can I fix CVE-2019-10785 in dojox?
To fix CVE-2019-10785 in dojox, update to version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7, or 1.11.9, depending on your current version.
Where can I find more information about CVE-2019-10785?
You can find more information about CVE-2019-10785 at the following references: [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/176460), [IBM Support](https://www.ibm.com/support/pages/node/6455281), [GitHub Advisory](https://github.com/dojo/dojox/security/advisories/GHSA-pg97-ww7h-5mjr).