Some weaknesses and vulnerabilities have been reported in Dojo Toolkit, which can be exploited by malicious people to conduct redirection and cross-site scripting attacks.

1) Some weaknesses are caused due to certain scripts allowing to redirect users to a site specified by an attacker. This can be exploited to e.g. redirect users to an (untrusted) fake site.

2) Input passed to the "theme" parameter in dijit\tests\_testCommon.js, the "dojoUrl" and "testUrl" parameters in doh\runner.html, and certain other unspecified parameters in other scripts is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Note: Successful exploitation of some of the vulnerabilities requires that Dojo is deployed with test files, e.g. by building Dojo from the Dojo SDK with "copyTests" being set to "true" (default setting in vulnerable versions).

Solution
Update to version 0.4.4, 1.0.3, 1.1.2, 1.2.4, 1.3.3, and 1.4.2.

Provided and/or discovered by
1) Reported by the vendor.
2) Reported by the vendor and Adam Bixby, Gotham Digital Science

Changelog
Further details available to Secunia VIM customers

Original Advisory
Gotham Digitial Science:
http://www.gdssecurity.com/l/b/2010/03/12/multiple-dom-based-xss-in-dojo-toolkit-sdk/

Dojo Toolkit:
http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/
http://bugs.dojotoolkit.org/ticket/10773

Deep Links
Links available to Secunia VIM customers