This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-4051 →
DEBIAN-CVE-2020-4051
In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8,...
Original description
The description as published by the source.
In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
dojo
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4+dfsg1-1"}]}]
Debian:13
dojo
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4+dfsg1-1"}]}]
Debian:14
dojo
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4+dfsg1-1"}]}]
References
- advisory security-tracker.debian.org