Malicious code in sap-action2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a7074778f420cd6e72cd47c261e9d9628b1b4257940eb2224ba02a924ed3706 The OpenSSF Package Analysis project identified 'sap-action2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2018-14635

Name of the Vulnerable Software and Affected Versions SaltOS version 3.1 r8126 Description The issue allows for SQL Injection via the action2 parameter in the action=ajax&query=numbers&page=usuarios endpoint. This can be exploited by injecting malicious SQL code into the action2 parameter, marked...