CVE-2021-23450

Name of the Vulnerable Software and Affected Versions dojo versions all

Description The issue is related to the incorrect management of code generation in the dojo library's setObject function. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with Prototype Pollution via the setObject function.

Recommendations For all versions of dojo, consider disabling the setObject function as a temporary workaround until a patch is available. Restrict access to the dojo library to minimize the risk of exploitation. Avoid using the setObject function in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.