{"id":"EUVD-2022-0644","revision":"b2bed4bc302440dc80e9e095b723c98f","records":[{"revision":"b2bed4bc302440dc80e9e095b723c98f","observedAt":"2026-10-28T14:54:49.946+00:00","statement":{"source":"euvd","id":"EUVD-2022-0644","aliases":["CVE-2021-23450","GHSA-m8gw-hjpr-rjv7"],"title":"All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.","description":"All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","score":7.5,"severity":null}],"references":["https://snyk.io/vuln/SNYK-JS-DOJO-1535223","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2313033","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBDOJO-2313034","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2313035","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2313036","https://github.com/dojo/dojo/blob/4c39c14349408fc8274e19b399ffc660512ed07c/_base/lang.js%23L172","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00030.html"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0644","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Dec 17, 2021, 8:05:19 PM","dateUpdated":"Oct 8, 2026, 9:13:57 PM"},"relatedAdvisories":[{"id":"WID-SEC-W-2023-0809","title":"IBM QRadar SIEM: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-22809","CVE-2022-4883","CVE-2022-46364","CVE-2022-46363","CVE-2022-45143","CVE-2022-42890","CVE-2022-4254","CVE-2022-42252","CVE-2022-41966","CVE-2022-41946","CVE-2022-41704","CVE-2022-40156","CVE-2022-40155","CVE-2022-40154","CVE-2022-40153","CVE-2022-40152","CVE-2022-40150","CVE-2022-40149","CVE-2022-37603","CVE-2022-37601","CVE-2022-37599","CVE-2022-37598","CVE-2022-3676","CVE-2022-36364","CVE-2022-36033","CVE-2022-34917","CVE-2022-31197","CVE-2022-31129","CVE-2022-2964","CVE-2022-28733","CVE-2022-2795","CVE-2022-25927","CVE-2022-25901","CVE-2022-25758","CVE-2022-25647","CVE-2022-24999","CVE-2022-24839","CVE-2022-24823","CVE-2022-24785","CVE-2022-23437","CVE-2022-22971","CVE-2022-22970","CVE-2022-21724","CVE-2022-21628","CVE-2022-21626","CVE-2022-21624","CVE-2022-21619","CVE-2021-43797","CVE-2021-42740","CVE-2021-42581","CVE-2021-39227","CVE-2021-3918","CVE-2021-3807","CVE-2021-37713","CVE-2021-37712","CVE-2021-37701","CVE-2021-3765","CVE-2021-37137","CVE-2021-37136","CVE-2021-32804","CVE-2021-32803","CVE-2021-29060","CVE-2021-26401","CVE-2021-25220","CVE-2021-23450","CVE-2021-23382","CVE-2021-23368","CVE-2021-23364","CVE-2021-23362","CVE-2021-23343","CVE-2021-21409","CVE-2021-21295","CVE-2021-21290","CVE-2020-7764","CVE-2020-5259","CVE-2020-24025","CVE-2020-15366","CVE-2020-13936","CVE-2019-6286","CVE-2019-6284","CVE-2019-6283","CVE-2019-10785","CVE-2018-8036","CVE-2018-20821","CVE-2018-20190","CVE-2018-19839","CVE-2018-19838","CVE-2018-19827","CVE-2018-19797","CVE-2018-15494","CVE-2018-11698","CVE-2018-11694"]},{"id":"WID-SEC-W-2023-1333","title":"IBM Tivoli Business Service Manager: Schwachstelle ermöglicht Codeausführung","vulnerabilityIds":["CVE-2021-23450"]},{"id":"WID-SEC-W-2025-0825","title":"Oracle Commerce: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-23450","CVE-2023-51074","CVE-2024-38819","CVE-2024-45613","CVE-2025-21576","CVE-2025-24813"]},{"id":"WID-SEC-W-2024-0955","title":"HCL Domino Blog Template: Schwachstelle ermöglicht Codeausführung und Denial of Service","vulnerabilityIds":["CVE-2021-23450"]},{"id":"WID-SEC-W-2024-3309","title":"IBM Tivoli Netcool/OMNIbus: Schwachstelle ermöglicht Codeausführung","vulnerabilityIds":["CVE-2021-23450"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2022-0644","identifiers":["EUVD-2022-0644","CVE-2021-23450","GHSA-m8gw-hjpr-rjv7"]},"retained":false,"historicalAffected":[]}],"coverage":[]}