415 matches found
Cross-site Scripting in karma
karma prior to version 6.3.14 contains a cross-site scripting vulnerability...
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
Cross site scripting
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437 Cross-site Scripting (XSS) - DOM in karma-runner/karma
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437 Cross-site Scripting (XSS) - DOM in karma-runner/karma
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
CVE-2022-0437
Summary: The CVE-2022-0437 issue affects the karma-runner project (NPM package karma) prior to 6.3.14, with a DOM-based cross-site scripting vulnerability in the client-side DOM. The underlying cause is a DOM-based XSS condition that could allow arbitrary JavaScript execution in the victim’s brow...
EUVD-2022-0897
Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...
Karma 跨站脚本漏洞
Karma is a simple tool. Allows JavaScript code to be executed in multiple real browsers. karma has a cross-site scripting vulnerability that stems from the DOM in NPM karma. no details of the vulnerability are currently available...
Cross-site Scripting (XSS) - DOM in karma-runner/karma
Description DOM-based XSS is a vulnerability in which the attacker can inject arbitrary javascript code in any DOM sink that supports dynamic code execution. In our case, source is query parameter returnurl and sink is location.href. Proof of Concept 1 Start karma server and visit the following...
Remote Code Execution (RCE)
karma-mojo is vulnerable to remote code execution RCE. The attack exists because the argument config in the function grep can be manipulated by attacker using malicious code as it was not sanitized before execution...
karma-mojo injection vulnerability
karma-mojo is a package that supports running a selected subset of tests in Karma. An injection vulnerability exists in karma-mojo 1.0.1 and prior versions. The vulnerability stems from a lack of proper validation of user input data by a networked system or product during the course of a user's...
CVE-2020-7626
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
CVE-2020-7626
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
Command injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
CVE-2020-7626
CVE-2020-7626 affects the npm package karma-mojo up to version 1.0.1. The vulnerability is a Command Injection due to unsanitized input in the config argument, allowing an attacker to execute arbitrary commands. Multiple connected sources corroborate the issue and identify the impact as arbitrary...
CVE-2020-7626
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
Command Injection
Overview karma-mojo is a plugin for Karma that provides a binary for running only a select subset of tests at a time instead of running the whole test suite. Affected versions of this package are vulnerable to Command Injection. The argument config can be controlled by users without any...