CVE-2026-119646

The Open Web Analytics software before version 1.14.1 contains an authorization vulnerability in its REST Report API . The root cause is that clickstream and transaction reports are not properly scoped to the authorized siteId . Consequently, an authenticated user with view_reports permissions on...

CVE-2026-119646 Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API

Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites' report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with viewreports on one site can supply that siteId with another...

CVE-2009-4951

Unspecified vulnerability in the ClickStream Analyzer output alternetcsaout extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

Malware in @airtel-web/clickstream

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @airtel-web/clickstream is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

EUVD-2025-205228

Malicious code in @airtel-web/clickstream npm...

MAL-2025-192926 Malicious code in @airtel-web/clickstream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fe59d4697403d2c084c34ca36fe20a14b48c6e1c581877e8ccf9f4ea6cb6a3 The package @airtel-web/clickstream was found to contain malicious code. Source: ghsa-malware...

Malicious code in @airtel-web/clickstream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fe59d4697403d2c084c34ca36fe20a14b48c6e1c581877e8ccf9f4ea6cb6a3 The package @airtel-web/clickstream was found to contain malicious code. Source: ghsa-malware...

EUVD-2009-4913

Malware in sbrugna...

Malware in eg-clickstream-sdk-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-2679 Malicious code in eg-clickstream-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0705bae9b8b83918363a34220367ce898de3e491c1f68e183ed880048b2f9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eg-clickstream-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0705bae9b8b83918363a34220367ce898de3e491c1f68e183ed880048b2f9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2009-4951

Unspecified vulnerability in the ClickStream Analyzer output alternetcsaout extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

Security feature bypass

Unspecified vulnerability in the ClickStream Analyzer output alternetcsaout extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2009-4951

Unspecified vulnerability in the ClickStream Analyzer output alternetcsaout extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2009-4951

The CVE affects the TYPO3 environment via the ClickStream Analyzer [output] (alternet_csa_out) extension, version 0.3.0 and earlier. The vulnerability is described as unspecified and allows remote attackers to obtain sensitive information through unknown vectors. No concrete root cause, affected ...

CVE-2009-4951: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the ClickStream Analyzer output alternetcsaout extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "A21glossary Advanced Output" a21glossaryadvancedoutput, "ClickStream Analyzer output" alternetcsaout, "Directory Listing" dirlisting, "Store Locator" locator, "Userdata Create/Edit" sguserdata, "Versatile...