Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS13NW1qLWo0NXEtbTYzOM4AA80D

ZendFramework1 Potential Security Issues in Bundled Dojo Library

In mid-March, 2010, the Dojo Foundation issued a Security Advisory indicating potential security issues with specific files in Dojo Toolkit. Details of the advisory may be found on the Dojo website:

http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
In particular, several files in the Dojo tree were identified as having potential exploits, and the Dojo team also advised disabling or removing any PHP scripts in the tree when deploying to production.

Permalink: https://github.com/advisories/GHSA-w5mj-j45q-m638
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13NW1qLWo0NXEtbTYzOM4AA80D
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 6 months ago
Updated: 6 months ago

Identifiers: GHSA-w5mj-j45q-m638
References:

• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2010-07.yaml
• https://web.archive.org/web/20210509072723/https://framework.zend.com/security/advisory/ZF2010-07
• http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory
• https://github.com/advisories/GHSA-w5mj-j45q-m638

Blast Radius: 0.0

Affected Packages