Lucene search
+L

3 matches found

OSV
OSV
•added 2020/09/01 7:44 p.m.•16 views

GHSA-2P62-C4RM-MR72 Malicious Package in another-date-picker

Version 2.0.43 of another-date-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.43 of this module is found installe...

9.8CVSS7.1AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2020/09/01 7:44 p.m.•20 views

Malicious Package in another-date-picker

Version 2.0.43 of another-date-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.43 of this module is found installe...

2.9AI score
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•3 views

PT-2020-20965

Name of the Vulnerable Software and Affected Versions another-date-picker version 2.0.43 Description The issue concerns malicious code in version 2.0.43 of the another-date-picker module. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from...

9.8CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder