TYPO3 Disclosure of Information about Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

PT-2024-40385 · Requirejs · Requirejs

Name of the Vulnerable Software and Affected Versions: RequireJS affected versions not specified Description: A potential issue has been discovered in the mechanisms used for configuration of RequireJS package loading, making it susceptible to information disclosure. This could allow a potential...

Prototype Pollution

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Prototype Pollution via the config function, due to improper sanitization of its parameter content. Note: This advisory is revoked as a duplicate of CVE-2024-38999. PoC js var requirejs=...

Malicious code in requirejs-injector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d97c2ea570f4f2be827b6b8f1bbaff3230a6c0824401db8ce32b7d19d570bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5758 Malicious code in requirejs-injector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d97c2ea570f4f2be827b6b8f1bbaff3230a6c0824401db8ce32b7d19d570bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...