CVE-2020-4051: Debian Linux

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than 1.16.3, there is a cross-site scripting vulnerability in the Editor's LinkDialog plugin. This has been fixed in 1.11.11, 1.12.9, 1.13.8, 1.14.7, 1.15.4, 1.16.3.

Affected products

• Debian Debian Linux: version 10.0 only
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Netapp Snapcenter: affected versions not specified
• Openjsf Dijit: before 1.11.11 (fixed in 1.11.11); from 1.12.0, before 1.12.9 (fixed in 1.12.9); from 1.13.0, before 1.13.8 (fixed in 1.13.8); from 1.14.0, before 1.14.7 (fixed in 1.14.7); from 1.15.0, before 1.15.4 (fixed in 1.15.4); from 1.16.0, before 1.16.3 (fixed in 1.16.3)

Published 2020-06-15. Last modified 2026-06-17.