CVE - CVE-2010-2274

CVE-ID
CVE-2010-2274	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to dojo/resources/iframe_history.html, dojox/av/FLAudio.js, dojox/av/FLVideo.js, dojox/av/resources/audio.swf, dojox/av/resources/video.swf, util/buildscripts/jslib/build.js, util/buildscripts/jslib/buildUtil.js, and util/doh/runner.html.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
AIXAPAR:LO50833 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50833 AIXAPAR:LO50849 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50849 AIXAPAR:LO50856 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50856 AIXAPAR:LO50896 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50896 AIXAPAR:LO50932 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50932 AIXAPAR:LO50958 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50958 AIXAPAR:LO50994 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1LO50994 CONFIRM:http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21431472 SECUNIA:38964 URL:http://secunia.com/advisories/38964 SECUNIA:40007 URL:http://secunia.com/advisories/40007 VUPEN:ADV-2010-1281 URL:~~http://www.vupen.com/english/advisories/2010/1281~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20100614	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100614)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)