428 matches found
CVE-2021-23495
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
Open redirect
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
CVE-2021-23495
Summary: Karma (JavaScript test runner) before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter. Affected component: karma
CVE-2021-23495 Open Redirect
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
CVE-2021-23495
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
UIkarma 输入验证错误漏洞
karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks...
karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +52 more potentially affected by CVE-2021-23495 via karma (>=6.1.1, <=6.3.14)
karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2021-23495 Source advisory: SNYK:JS-KARMA-2396325...
Open Redirect
Overview karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. Affected versions of this package are vulnerable to Open Redirect due to missing validation of the returnurl query parameter. Remediation Upgrade karma to version 6.3.16 or higher. References -...
karma cross-site scripting vulnerability
Karma is a simple tool. Allows JavaScript code to be executed in multiple real browsers. karma has a cross-site scripting vulnerability that stems from the DOM in NPM karma. no details of the vulnerability are currently available...
Cross-site Scripting in karma
karma prior to version 6.3.14 contains a cross-site scripting vulnerability...
GHSA-7X7C-QM48-PQ9C Cross-site Scripting in karma
karma prior to version 6.3.14 contains a cross-site scripting vulnerability...
@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +51 more potentially affected by CVE-2022-0437 via karma (>=6.1.1, <=6.3.13)
karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2022-0437 Source advisory: OSV:GHSA-7X7C-QM48-PQ9C...
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
Cross site scripting
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437 Cross-site Scripting (XSS) - DOM in karma-runner/karma
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
