Vulnerability Description
In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openjsf | Dijit | < 1.11.11 |
| Debian | Debian Linux | 10.0 |
| Netapp | Active Iq Unified Manager | - |
| Netapp | Oncommand Insight | - |
| Netapp | Oncommand Workflow Automation | - |
| Netapp | Snapcenter | - |
Related Weaknesses (CWE)
References
- https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301PatchThird Party Advisory
- https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/01/msg00030.htmlMailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20201023-0003/Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.htmlPatchThird Party Advisory
- https://github.com/dojo/dijit/commit/462bdcd60d0333315fe69ab4709c894d78f61301PatchThird Party Advisory
- https://github.com/dojo/dijit/security/advisories/GHSA-cxjc-r2fp-7mq6Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/01/msg00030.htmlMailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20201023-0003/Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.htmlPatchThird Party Advisory
FAQ
What is CVE-2020-4051?
CVE-2020-4051 is a vulnerability with a CVSS score of 3.7 (LOW). In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than ...
How severe is CVE-2020-4051?
CVE-2020-4051 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-4051?
Check the references section above for vendor advisories and patch information. Affected products include: Openjsf Dijit, Debian Debian Linux, Netapp Active Iq Unified Manager, Netapp Oncommand Insight, Netapp Oncommand Workflow Automation.