CVE-2010-2275
Publication date 15 June 2010
Last updated 24 July 2024
Ubuntu priority
Cross-site scripting (XSS) vulnerability in dijit/tests/_testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/test_Button.html.
Status
Package | Ubuntu Release | Status |
---|---|---|
dojo | 10.04 LTS lucid |
Not affected
|
9.10 karmic | Not in release | |
9.04 jaunty | Not in release | |
8.04 LTS hardy | Not in release | |
6.06 LTS dapper | Not in release |