Lucene search
+L

2 matches found

OSV
OSV
added 2020/09/01 7:44 p.m.11 views

GHSA-2P62-C4RM-MR72 Malicious Package in another-date-picker

Version 2.0.43 of another-date-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.43 of this module is found installe...

9.8CVSS7.1AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2020/09/01 7:44 p.m.16 views

Malicious Package in another-date-picker

Version 2.0.43 of another-date-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.43 of this module is found installe...

2.9AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder