PT-2022-22048 · Jenkins · Jenkins Embeddable Build Status Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.3 and earlier Description: The issue concerns the incorrect performance of the ViewStatus permission check in the HTTP endpoint provided for "unprotected" status badge access. This allows...

PT-2022-22039 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.340 through 2.355 Description: The issue arises from symbol-based icons unescaping previously escaped values of tooltip parameters, resulting in a cross-site scripting XSS vulnerability. This vulnerability is known to be...

PT-2022-22038 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.321 through 2.355 Jenkins LTS versions 2.332.1 through 2.332.3 Description: The HTML output generated for new symbol-based SVG icons in Jenkins includes the title attribute of l:ionicon until Jenkins 2.334 and alt attribute...

Malicious code in uitk-react-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3380ff8083f7054138496758ebd9a9e976927217afe13950fd8c32eae583b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6763 Malicious code in uitk-react-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3380ff8083f7054138496758ebd9a9e976927217afe13950fd8c32eae583b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cm.icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82882ce314ad2b57a73f7dd4b134c17f6dad7972db0b8dcb9bf132038c3ea616 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zd-svg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 169e62d18b5cd6071c986b8165e474e7a6e36580804e404b65b1b2578c66d487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7380 Malicious code in zd-svg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 169e62d18b5cd6071c986b8165e474e7a6e36580804e404b65b1b2578c66d487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6843 Malicious code in usaa-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e90c6fdc6fe30d9e6c691dbeaa35acfdcb80c4b0f64b12cc5173fc9d1f2da369 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e90c6fdc6fe30d9e6c691dbeaa35acfdcb80c4b0f64b12cc5173fc9d1f2da369 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mt-web-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c37b1bea403ec4d2eb17f26d9b0256569fa63d1831a5cbc89498a5fdaead5d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-573 Malicious code in @sbbol/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acfea325356876dd99113f62d64ce4f5c2cc6993f0e4aa4a2de3cf0aa385a896 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sbbol/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acfea325356876dd99113f62d64ce4f5c2cc6993f0e4aa4a2de3cf0aa385a896 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tochka-modules/t15-ui-kit-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 086e63c619a5b6887d4c00c37636d7366887829646ac38d2125202b4f5269d88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6945 Malicious code in visitor-ui-component-library-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a49ce3e79a28efd550ad3f4e2395fef81eb43c22efdaf89af060d89fd4649e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3756 Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icons-mail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5044c44aa1d6f9b455bbd96420485e2d7aa4dee38d050a7ebdcb96dbd10fd65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-151 Malicious code in @btransport/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 621a95129c2f70569ada480eda14ad1e9b823d4d49e79d00ee35be4b60a83d3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icons-vk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66e183f286f6f62b2bbedf1d9f657c633438f687c13336190e4d2918389291f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-69 Malicious code in @allianzndbx/allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab9c214e3dd5fc421e8fcf2250167da41ffe03de081bac02157ad3d4b01595c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...