MAL-2024-10485 Malicious code in eds-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274d7cb9ce95b52c1349a7b6ffa0bd0629443ccc2709e4abddeaeed143443ee5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IceCMS File Upload Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A file upload vulnerability exists in IceCMS 3.4.7 and earlier versions, which stems from the lack of validation of uploaded files in the uploadFile method of FileUtils.java. An attacker can use...

MAL-2024-9772 Malicious code in plugin-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in plugin-vue-jsx (npm)

--- -= Per source details. Do not edit below this line.=-...

ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

The ReDoS can be exploited through the parseHTML function in the html-parser.ts file. This flaw allows attackers to slow down the application by providing specially crafted input that causes inefficient processing of regular expressions, leading to excessive resource consumption. To demonstrate...

GHSA-5J4C-8P2G-V4JX ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function

The ReDoS can be exploited through the parseHTML function in the html-parser.ts file. This flaw allows attackers to slow down the application by providing specially crafted input that causes inefficient processing of regular expressions, leading to excessive resource consumption. To demonstrate...

0-1-project (0.0.1), 0.8.18-p11 (0.8.18-p12) +61266 more potentially affected by CVE-2024-9506 via vue (>=2.0.0, <=2.7.16)

vue NPM version =2.0.0, =1.0.0, =0.0.1, =1.0.0, =0.1.0, =1.1.0, =1.2.3 and more Source cves: CVE-2024-9506 Source advisory: OSV:GHSA-5J4C-8P2G-V4JX...

CVE-2024-9506

Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability...

CVE-2024-9506

CVE-2024-9506 describes an improper regular expression in Vue’s parseHTML function, causing a potential ReDoS. The available connected sources confirm the vulnerable component is Vue's HTML parsing (parseHTML/html-parser.ts) and cite a low CVSS v3.1 base score (3.7) with impact on availability. C...

CVE-2024-9506 Regular Expression Denial of Service (ReDoS)

Improper regular expression in Vue's parseHTML function leads to a potential regular expression denial of service vulnerability...

PT-2024-39667 · Vue · Vue

Name of the Vulnerable Software and Affected Versions: Vue affected versions not specified Description: The issue is related to an improper regular expression in Vue's parseHTML function, which can lead to a potential regular expression denial of service vulnerability. This flaw, known as a ReDoS...

Vue 安全漏洞

Vue is an HTML, CSS, and JS framework open-sourced by Vue. It is used to develop web applications with fine-grained reactivity. A security vulnerability exists in Vue versions 2.0.0 through 3.0.0, which stems from a potential regular expression denial of service vulnerability caused by an incorre...

Malicious code in vue-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af79d6208188b1a6f878e404ecc5d2609b1bbd40511af1c30e8f6124d5431de7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9091 Malicious code in vue-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af79d6208188b1a6f878e404ecc5d2609b1bbd40511af1c30e8f6124d5431de7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

gotribe 信任管理问题漏洞

gotribe is gotribe open source a small cms solution for Go + Vue development. A trust management issue vulnerability exists in gotribe, which stems from the fact that manipulation of the parameter config.key results in hard-coded credentials...

GO-2023-1560 Path Traversal in gin-vue-admin in github.com/flipped-aurora/gin-vue-admin

Path Traversal in gin-vue-admin in github.com/flipped-aurora/gin-vue-admin...

lesli-vue (>=1.0.1, <=1.0.3) potentially affected by CVE-2024-43368 via trix (>=2.0.8, <=2.0.10)

trix NPM version =2.0.8, =1.0.1, =1.0.3 Source cves: CVE-2024-43368 Source advisory: OSV:GHSA-QM2Q-9F3Q-2VCV...

CVE-2024-41809 OpenObserve Cross-site Scripting (XSS) vulnerability in `openobserve/web/src/views/MemberSubscription.vue`

OpenObserve is an open-source observability platform. Starting in version 0.4.4 and prior to version 0.10.0, OpenObserve contains a cross-site scripting vulnerability in line 32 of openobserve/web/src/views/MemberSubscription.vue. Version 0.10.0 sanitizes incoming html...

CVE-2024-41808 OpenObserve stored XSS vulnerability may lead to complete account takeover

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log. However, all versions of the platform through 0.9.1 do not sanitize user input in the filter selection menu, which may result in complete account takeover. ...

CVE-2024-41808 OpenObserve stored XSS vulnerability may lead to complete account takeover

The OpenObserve open-source observability platform provides the ability to filter logs in a dashboard by the values uploaded in a given log. However, all versions of the platform through 0.9.1 do not sanitize user input in the filter selection menu, which may result in complete account takeover. ...