CVE-2021-23450

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-23450

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23450.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-23450

Aliases

GHSA-m8gw-hjpr-rjv7

Downstream

DEBIAN-CVE-2021-23450

DLA-3289-1

UBUNTU-CVE-2021-23450

USN-7569-1

Related

MGASA-2023-0039
SNYK-JAVA-ORGWEBJARS-2313036
SNYK-JAVA-ORGWEBJARSBOWER-2313035
SNYK-JAVA-ORGWEBJARSBOWERGITHUBDOJO-2313034
SNYK-JAVA-ORGWEBJARSNPM-2313033
SNYK-JS-DOJO-1535223

Published

2021-12-17T20:15:08.177Z

Modified

2026-04-02T06:47:33.704329Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

References

Affected packages

Git / github.com/dojo/dojo

Affected ranges

Type

GIT

Repo

https://github.com/dojo/dojo

Events

Introduced

Fixed

712ed17a09c9bf0ca64cea78b8a0ee2b370633e8

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.17.0"
        }
    ]
}

Affected versions

0.*

0.0.0test

0.9.0

0.9.0beta

0.9.0rc1

1.*

1.0.0

1.0.0beta

1.0.0rc1

1.1.0

1.1.0b2

1.1.0b3

1.1.0rc1

1.1.0rc2

1.1.1

1.1.1-maven

1.1.1rc1

1.1.1rc2

1.1.2

1.1.2rc1

1.10.0

1.10.0-beta1

1.10.0-rc1

1.10.1

1.10.10

1.10.2

1.10.3

1.10.4

1.10.5

1.10.6

1.10.7

1.10.8

1.10.9

1.11.0

1.11.0-rc1

1.11.0-rc2

1.11.0-rc3

1.11.0-rc4

1.11.0-rc5

1.11.1

1.11.10

1.11.11

1.11.12

1.11.13

1.11.2

1.11.3

1.11.4

1.11.5

1.11.6

1.11.7

1.11.8

1.11.9

1.12.0

1.12.0-rc1

1.12.0-rc2

1.12.0-rc3

1.12.0-rc4

1.12.1

1.12.10

1.12.11

1.12.2

1.12.3

1.12.4

1.12.5

1.12.6

1.12.7

1.12.8

1.12.9

1.13.0

1.13.1

1.13.10

1.13.2

1.13.3

1.13.4

1.13.5

1.13.6

1.13.7

1.13.8

1.13.9

1.14.0

1.14.1

1.14.2

1.14.3

1.14.4

1.14.5

1.14.6

1.14.7

1.14.8

1.14.9

1.15.0

1.15.1

1.15.2

1.15.3

1.15.4

1.15.5

1.15.6

1.16.0

1.16.1

1.16.2

1.16.3

1.16.4

1.16.5

1.1b1

1.2.0

1.2.0b1

1.2.0b1m1rc1

1.2.0b1m2

1.2.0b1rc1m2

1.2.0b2

1.2.0rc1

1.2.0rc2

1.2.1

1.2.1rc1

1.2.1rc2

1.2.2

1.2.2rc1

1.2.3

1.2.3rc1

1.2.3rc2

1.2.4

1.3.0

1.3.0b1

1.3.0b2

1.3.0b3

1.3.0rc1

1.3.0rc2

1.3.1

1.3.1rc1

1.3.2

1.3.2rc1

1.3.2rc2

1.3.3

1.4.0

1.4.0-tc1

1.4.0b1

1.4.0b2

1.4.0rc1

1.4.0rc2

1.4.1

1.4.1rc1

1.4.2

1.4.2rc1

1.4.3

1.4.4

1.4.4rc1

1.4.5

1.4.6

1.4.7

1.4.8

1.5.0

1.5.0b1

1.5.0b2

1.5.0b3

1.5.0rc1

1.5.0rc2

1.5.0rc3

1.5.1

1.5.1rc1

1.5.2

1.5.2rc1

1.5.3

1.5.4

1.5.5

1.5.6

1.6.0

1.6.0b1

1.6.0b2

1.6.0rc1

1.6.1

1.6.1rc1

1.6.1rc2

1.6.2

1.6.3

1.6.4

1.6.5

1.7.0

1.7.0b1

1.7.0b2

1.7.0b3

1.7.0b4

1.7.0b5

1.7.0b6

1.7.0rc1

1.7.0rc2

1.7.0throwaway

1.7.1

1.7.10

1.7.11

1.7.12

1.7.1rc1

1.7.1rc2

1.7.2

1.7.2rc1

1.7.3

1.7.3rc1

1.7.4

1.7.4rc1

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8.0

1.8.0b1

1.8.0rc1

1.8.0rc2

1.8.1

1.8.10

1.8.11

1.8.12

1.8.13

1.8.14

1.8.1rc1

1.8.1rc2

1.8.1rc3

1.8.2

1.8.2rc1

1.8.3

1.8.4

1.8.4rc1

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9.0

1.9.0a1

1.9.0a2

1.9.0b1

1.9.0b2

1.9.0rc1

1.9.0rc2

1.9.1

1.9.10

1.9.11

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23450.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.6.0.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "17.7"
            },
            {
                "last_affected": "17.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.1.1.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]