{"schemaVersion":3,"id":"USN-7569-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"dojo vulnerabilities\n\nIt was discovered that Dojo did not correctly handle DataGrids. An\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2018-15494)\n\nIt was discovered that Dojo was vulnerable to prototype pollution. An\nattacker could possibly use this issue to execute arbitrary code.\n(CVE-2021-23450)\n\nJonathan Leitschuh discovered that Dojo did not correctly sanitize\ncertain inputs. An attacker could possibly use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2019-10785, CVE-2020-4051)","dates":{"published":"2025-06-16T02:55:56.000Z","modified":"2026-06-25T13:32:30.502Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"dojo","name":"dojo","label":"dojo","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dojo","purlType":"deb","versions":[{"text":"< 1.10.4+dfsg-2ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.15.0+dfsg1-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.15.4+dfsg1-1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.4+dfsg-2ubuntu0.1~esm1 | < 1.15.0+dfsg1-1ubuntu0.1~esm1 | < 1.15.4+dfsg1-1ubuntu0.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7569-1","label":"ubuntu.com/security/notices/USN-7569-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-15494","label":"ubuntu.com/security/CVE-2018-15494","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-10785","label":"ubuntu.com/security/CVE-2019-10785","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-4051","label":"ubuntu.com/security/CVE-2020-4051","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-23450","label":"ubuntu.com/security/CVE-2021-23450","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2018-15494","CVE-2019-10785","CVE-2020-4051","CVE-2021-23450"],"downstream":[],"duplicates":[],"related":["CVE-2018-15494","CVE-2019-10785","CVE-2020-4051","CVE-2021-23450"]},"timeline":[{"kind":"published","date":"2025-06-16T02:55:56.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:30.502Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:39:53.520Z","stale":false,"partial":false}}