2 matches found
Malicious code in ent-cas-form-navigation-buttons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b76254963f588f5a71a7483ecb0f970c5db705214cb7a836d484b8d7ec0b2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
UBUNTU-CVE-2012-2357
The Multi-Authentication feature in the Central Authentication Service CAS functionality in auth/cas/casform.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network...