1302 matches found
Malicious code in sfdc-abstract-cartesian-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 276c21f96d0fab4f0a31ce90298fee2aa61a7083e79ed54ed72e1d2dc4315c38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6043 Malicious code in sfdc-abstract-cartesian-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 276c21f96d0fab4f0a31ce90298fee2aa61a7083e79ed54ed72e1d2dc4315c38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-metric-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271cc52be037d1280f7b1e42cb5e7eb1e8638a6d921a2b20713a01b8fbf48041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6047 Malicious code in sfdc-bar-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf33d2fd517bceff3b5184b4d4e9e903dd86c896c104a5566bee2dbcf0ab8fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6056 Malicious code in sfdc-scatter-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6687a68a22652b9678eb2aa5d8210b444e4aa5e70e59c09c65cf84b7cc8ebc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-scatter-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6687a68a22652b9678eb2aa5d8210b444e4aa5e70e59c09c65cf84b7cc8ebc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6051 Malicious code in sfdc-funnel-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 316089f2b90b5fe73ad3851e5d26f1b289aebe6b4f28413faaf534e7b486dc71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-gauge-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3d3c4d396b88da55beb015faf69d1b023e9de5b98e08d813f6824e37d7242e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-funnel-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 316089f2b90b5fe73ad3851e5d26f1b289aebe6b4f28413faaf534e7b486dc71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-line-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e0a07efc833dff06002f9a96964cdf1b0140f046ca60219455242deda50173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6048 Malicious code in sfdc-combo-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7cf617b3589a7e043630f4e0c193733fefe28df7f81c1b053e0ddd8a973a36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sfdc-combo-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7cf617b3589a7e043630f4e0c193733fefe28df7f81c1b053e0ddd8a973a36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6054 Malicious code in sfdc-line-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e0a07efc833dff06002f9a96964cdf1b0140f046ca60219455242deda50173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6946 Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-24896
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
Design/Logic Flaw
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap
Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...
CVE-2022-24896
CVE-2022-24896 affects Tuleap versions prior to 13.7.99.239. The vulnerability stems from improper authorization checks when displaying content in the Tracker Report Renderer and Chart widgets, allowing an attacker to disclose the name of trackers and the fields used in reports. Impact is informa...