{
  "cveId": "CVE-2020-4051",
  "url": "https://patchblox.com/security/cve/CVE-2020-4051",
  "summary": "CVE-2020-4051 is fixed in 4 products on 1 platform, first by libjs-dojo-core 1.15.0\u002Bdfsg1-1ubuntu0.1~esm1, released December 17, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libjs-dojo-core: In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal...",
  "description": "In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor\u0027s LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.",
  "published": "2020-06-15T15:15:00Z",
  "severity": "Medium",
  "epss": 0.01177,
  "epssPercentile": 0.67829,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libjs-dojo-core",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "libjs-dojo-core 1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjs-dojo-core-1.15.0-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-12-17T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-dojo-dijit",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "libjs-dojo-dijit 1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjs-dojo-dijit-1.15.0-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-12-17T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-dojo-dojox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "libjs-dojo-dojox 1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjs-dojo-dojox-1.15.0-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-12-17T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "shrinksafe",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "fix": "shrinksafe 1.15.0\u002Bdfsg1-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-shrinksafe-1.15.0-dfsg1-1ubuntu0.1-esm1",
      "released": "2021-12-17T12:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}