CVE-2010-2274

Description

Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.

References

http://www.vupen.com/english/advisories/2010/1281

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849

http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833

http://www-01.ibm.com/support/docview.wss?uid=swg21431472

http://secunia.com/advisories/40007

http://secunia.com/advisories/38964

http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS