34 matches found
EUVD-2022-5918
Malicious code in bioql PyPI...
CVE-2024-25282
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25283
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25285
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25286
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25284
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
编号撤回
RedSys 3DSecure is a payment security technology from RedSys, Spain, designed to improve the security of online transactions, especially during credit and debit card payments. This CVE number has been withdrawn...
CVE-2024-25284
The 3DSecure 2.0 3DS Authorization Method component by Redsys is vulnerable to reflected Cross-Site Scripting (XSS) . The root cause is the lack of sanitization for the threeDSMethodData parameter in the threeDsMethod.jsp endpoint, which allows attackers to inject arbitrary web scripts by manipul...
CVE-2024-25282
The 3DSecure 2.0 product, specifically the 3DS Method Authentication component, is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper sanitization or validation of the base64-encoded params parameter during a /rest/online request containing a /redirect?action=challenge&txn=...
CVE-2024-25284
3DSecure 2.0 allows reflected XSS in the 3DS Authorization Method via the threeDsMethod.jsp threeDSMethodData parameter...
CVE-2024-25283
The 3DSecure 2.0 product, specifically the 3DS Authorization Challenge component by Redsys , is vulnerable to multiple reflected Cross-Site Scripting (XSS) flaws. The root cause is the lack of sanitization for the params parameter in a /rest/online request involving a /redirect?action=challenge&t...
CVE-2024-25286
CVE-2024-25286 concerns a CSRF vulnerability in the 3DSecure 2.0 system, specifically the “3DS Authorization Method” of Redsys (3DSecure 2.0). The issue allows an attacker to submit unauthorized form data by manipulating HTTP Origin and Referer headers, potentially triggering unauthorized transac...
CVE-2024-25283
3DSecure 2.0 allows reflected XSS in the 3DS Authorization Challenge via a modified params parameter in a /rest/online request with a /redirect?action=challenge&txn= substring...