Lucene search

CVE-2017-16044

🗓️ 04 Jun 2018 19:02:29Reported by hackeroneType

d3.js module hijacking environment variable

Reporter	Title	Published	Views	Family All 8
Node.js	Hijacked Environment Variables	8 Aug 201721:46	–	nodejs
Veracode	Malicious Typo-Squatting	5 Jun 201808:02	–	veracode
Prion	Code injection	4 Jun 201819:29	–	prion
OSV	d3.js is malware	23 Jul 201821:00	–	osv
NVD	CVE-2017-16044	4 Jun 201819:29	–	nvd
Cvelist	CVE-2017-16044	4 Jun 201819:00	–	cvelist
Github Security Blog	d3.js is malware	23 Jul 201821:00	–	github
OpenVAS	Malicious JavaScript Package Detection	12 Jun 201800:00	–	openvas

Nvd

Node

d3.js_project d3.jsnode.js

[
  {
    "product": "d3.js node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
nodesecurity	www.nodesecurity.io/advisories/497

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jun 2018 19:29Current

7.4High risk

Vulners AI Score7.4

CVSS25

CVSS37.5

EPSS0.00271