UBUNTU-CVE-2024-38999

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts..configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38999

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts..configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38998

...

PT-2024-28314

Name of the Vulnerable Software and Affected Versions requirejs version 2.3.6 Description The issue is related to a prototype pollution vulnerability via the function s.contexts. .configure. This allows attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary...

CVE-2024-38999

CVE-2024-38999 stems from a prototype pollution in jrburke/requirejs when calling the function s.contexts._.configure, enabling remote attackers to execute arbitrary code or cause a DoS via crafted requests. In the connected Jira advisory for Bitbucket Data Center/Server, this is described as a t...

Number withdrawn

RequireJS is RequireJS open source a library . It is used to load normal JavaScript files as well as more defined modules. This CVE number has been withdrawn...

CVE-2024-38999

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts..configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

RequireJS Security Vulnerability

RequireJS is an open source library for RequireJS. It is used to load common JavaScript files as well as more defined modules. A security vulnerability exists in RequireJS version v2.3.6, which originates from the inclusion of prototype contamination via the function s.contexts..configure, allowi...

CVE-2024-38998

...

CVE-2024-38999

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts..configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38999

jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts..configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Sensitive Information Disclosure

typo3/cms is vulnerable to Sensitive Information Disclosure. The vulnerability is due to mechanisms used for configuration of RequireJS package loading, which can potentially allow an attacker to retrieve additional information about the installed system and third-party extensions...

GHSA-F624-8HFQ-5FH3 TYPO3 Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

TYPO3 Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

Information Disclosure

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to Inline JavaScript settings within the RequireJS package, which allows an attacker to retrieve additional information about the installed system and third-party extensions...

GHSA-P2H4-7FP3-CMH8 TYPO3 Disclosure of Information about Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

TYPO3 Disclosure of Information about Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

PT-2024-40385 · Requirejs · Requirejs

Name of the Vulnerable Software and Affected Versions: RequireJS affected versions not specified Description: A potential issue has been discovered in the mechanisms used for configuration of RequireJS package loading, making it susceptible to information disclosure. This could allow a potential...

Prototype Pollution

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Prototype Pollution via the config function, due to improper sanitization of its parameter content. Note: This advisory is revoked as a duplicate of CVE-2024-38999. PoC js var requirejs=...

MAL-2022-5758 Malicious code in requirejs-injector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d97c2ea570f4f2be827b6b8f1bbaff3230a6c0824401db8ce32b7d19d570bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...