Unrated
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
CVE-2018-6561
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-6561 dojo Fixed in: 1.13.0+dfsg1-1
- Ubuntu UBUNTU-CVE-2018-6561 dojo
Original description The description as published by the source.
dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report github.com