Added |
CVSS V3.1 |
|
NIST AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
|
Added |
CVSS V2 |
|
NIST (AV:N/AC:M/Au:S/C:N/I:P/A:N)
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:* versions up to (excluding) 1.11.11
*cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:* versions from (including) 1.12.0 up to (excluding) 1.12.9
*cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:* versions from (including) 1.13.0 up to (excluding) 1.13.8
*cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:* versions from (including) 1.14.0 up to (excluding) 1.14.7
*cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:* versions from (including) 1.15.0 up to (excluding) 1.15.4
*cpe:2.3:a:openjsf:dijit:*:*:*:*:*:*:*:* versions from (including) 1.16.0 up to (excluding) 1.16.3
|
Changed |
Reference Type |
https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301 No Types Assigned
|
https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301 Patch, Third Party Advisory
|
Changed |
Reference Type |
https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6 No Types Assigned
|
https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6 Third Party Advisory
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|