MAL-2022-7095 Malicious code in webhint-configuration-braintree-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22de39e503c59d52d81baba1817d1b14b78230ed7cb08488889d1cac73f1a1d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cartridge (>=1.0.0b1 <=1.3.1), cartridge-braintree (>=1.2.1 <=1.2.2) +4 more potentially affected by CVE-2020-19002 via mezzanine (>=3.1.10 <=6.0.0)

mezzanine PYPI version =3.1.10, =1.0.0b1, =1.2.1, =0.0.1, =0.1.0a1, =0.1.0b1, =0.4.1, =0.4.4 Source cves: CVE-2020-19002 Source advisory: OSV:GHSA-FPV7-HX6R-9VCX...

Braintree sanitize-url cross-site scripting vulnerability

Braintree sanitize-url is an open source URL cleanup from Braintree, Inc. A cross-site scripting vulnerability exists in versions prior to Braintree sanitize-url 6.0.0, which stems from a lack of user-supplied data and output data validation filtering in the sanitizeUrl function. An attacker coul...

Cross-site Scripting (XSS)

@braintree/sanitize-url is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validating HTML encoding...

@0xgg/echomd (>=1.0.0 <=1.0.4), @adobe/parliament-ui-components (>=4.6.0 <=5.1.0) +718 more potentially affected by CVE-2021-23648 via @braintree/sanitize-url (>=1.0.0 <=5.0.2)

@braintree/sanitize-url NPM version =1.0.0, =1.0.0, =4.6.0, =2.6.1, =0.1.0, =0.0.18, =6.8.0, =0.1.2, =2.2.2, =0.5.0, =3.23.0, =0.0.0-nightly-2020972106, =0.1.1-alpha.19, =0.1.0, =0.1.0-integrate-flowzone-f2df00320763c10337790c7657713f782ca7a948 and more Source cves: CVE-2021-23648 Source advisory...

GHSA-HQQ7-2Q2V-82XQ Cross-site Scripting in sanitize-url

The package @braintree/sanitize-url before 6.0.0 is vulnerable to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function...

Cross-site Scripting in sanitize-url

The package @braintree/sanitize-url before 6.0.0 is vulnerable to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function...

CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

DEBIAN-CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

Cross site scripting

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

CVE-2021-23648

CVE-2021-23648 affects the package @braintree/sanitize-url prior to 6.0.0, which is vulnerable to Cross-site Scripting (XSS) due to improper sanitization in the sanitizeUrl function. This is supported by connected documents that list the vulnerability and the affected version range. The vulnerabi...

CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

Braintree sanitize-url 跨站脚本漏洞

Braintree sanitize-url is an open source URL cleanup from Braintree, Inc. A cross-site scripting vulnerability exists in versions prior to Braintree sanitize-url 6.0.0, which stems from a lack of user-supplied data and output data validation filtering in the sanitizeUrl function. An attacker coul...

PT-2022-9421 · Npm +4 · @Braintree/Sanitize-Url +4

Name of the Vulnerable Software and Affected Versions: @braintree/sanitize-url versions prior to 6.0.0 Description: The issue is related to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function. This allows for potential XSS attacks. Recommendations: For versions prior...

Cross-site Scripting (XSS)

Overview @braintree/sanitize-url is an A url sanitizer Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function. PoC: js const sanitizeUrl = require"@braintree/sanitize-url".sanitizeUrl forconst vector of...

Magento Braintree Credit Card Stealer

A code execution vulnerability has been reported in Braintree extension of Magento. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary code on the affected system, thereby gaining access to confidential credit card information...

codeology.braintreepayments.com XSS vulnerability

Vulnerable URL: http://codeology.braintreepayments.com/?url=" Details: Description| Value ---|--- Patched:| Yes, at 14.04.2016 Latest check for patch:| 14.04.2016 17:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 V...