4.3
CVE-2010-2274
- EPSS 0.91%
- Veröffentlicht 15.06.2010 14:30:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dojotoolkit ≫ Dojo Version1.0
Dojotoolkit ≫ Dojo Version1.0.1
Dojotoolkit ≫ Dojo Version1.0.2
Dojotoolkit ≫ Dojo Version1.1
Dojotoolkit ≫ Dojo Version1.1.1
Dojotoolkit ≫ Dojo Version1.2
Dojotoolkit ≫ Dojo Version1.2.1
Dojotoolkit ≫ Dojo Version1.2.2
Dojotoolkit ≫ Dojo Version1.2.3
Dojotoolkit ≫ Dojo Version1.3
Dojotoolkit ≫ Dojo Version1.3.1
Dojotoolkit ≫ Dojo Version1.3.2
Dojotoolkit ≫ Dojo Version1.4
Dojotoolkit ≫ Dojo Version1.4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.91% | 0.751 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|