CVE-2024-47923

Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-47923

CVE-2024-47923 affects Mashov (instructional management system). Multiple sources indicate an information disclosure (CWE-200) vulnerability where sensitive data could be exposed to unauthorized actors. CNNVD specifies affected versions: Mashov prior to 3.8.32; potential remediation would be to u...

PT-2024-32899 · Mashov · Mashov

Name of the Vulnerable Software and Affected Versions: Mashov affected versions not specified Description: The issue involves the exposure of sensitive information to an unauthorized actor, labeled as CWE-200. This concerns the potential for unauthorized access to sensitive data. Recommendations:...

Mashov information leakage vulnerability

Mashov is an instructional management system from the Israeli company Mashov. An information disclosure vulnerability exists in Mashov versions prior to 3.8.32, which arises from exposing sensitive information to unauthorized actors...

CVE-2024-41693

Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-41693

Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-41693

Mashov (an Israeli instructional management system) has a Cross-Site Scripting (XSS) flaw: CWE-80 due to improper neutralization of script-related HTML tags in web pages. The CVE-2024-41693 entry notes a basic XSS risk with CVSSv3.1 base score 6.1 (NETWORK, UI required, no privileges, changed sco...

CVE-2024-41693 Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

CVE-2024-41693 Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Mashov - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS...

PT-2024-29514 · Mashov · Mashov

Name of the Vulnerable Software and Affected Versions: Mashov affected versions not specified Description: The issue is related to improper neutralization of script-related HTML tags in a web page, which can lead to basic cross-site scripting XSS. This means that an attacker could potentially...

Mashov security vulnerabilities

Mashov is an instructional management system from the Israeli company Mashov. A security vulnerability exists in Mashov version 3.20210425, which stems from improper neutralization of script-related HTML tags in web pages and is susceptible to cross-site scripting attacks...

Malware in @mashov/fetlife-assets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...