EUVD-2022-52136

Malicious code in bioql PyPI...

CVE-2022-4882

A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/components/share/share.js of the component Share Plugin. The manipulation of the argument res leads to cross site...

CVE-2022-4876

A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...

CVE-2022-4882

A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/components/share/share.js of the component Share Plugin. The manipulation of the argument res leads to cross site...

CVE-2022-4882

A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/components/share/share.js of the component Share Plugin. The manipulation of the argument res leads to cross site...

Cross site scripting

A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/components/share/share.js of the component Share Plugin. The manipulation of the argument res leads to cross site...

CVE-2022-4882 kaltura mwEmbed Share Plugin share.js cross site scripting

A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/components/share/share.js of the component Share Plugin. The manipulation of the argument res leads to cross site...

CVE-2022-4882

CVE-2022-4882 affects kaltura mwEmbed (up to 2.91). The vulnerability resides in the Share Plugin’s file modules/KalturaSupport/components/share/share.js, where manipulating the res argument leads to cross-site scripting. The issue can be exploited remotely with high attack complexity and require...

mwEmbed 跨站脚本漏洞

mwEmbed is Kaltura open source a Kaltura HTML5 media library . Enables you to take advantage of HTML5 and Flash's unified configuration and development API. A cross-site scripting vulnerability exists in versions prior to kaltura mwEmbed 2.92.rc1, which stems from a problem with some unknown...

CVE-2022-4876

A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...

CVE-2022-4876

A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...

Cross site scripting

A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...

CVE-2022-4876

Kaltura mwEmbed up to 2.96.rc1 is affected by a cross-site scripting vulnerability in the handling of the file includes/DefaultSettings.php via the HTTP_X_FORWARDED_HOST parameter. The attack may be initiated remotely. Upgrading to 2.96.rc2 addresses the issue (patch 13b8812ebc8c9fa034eed91ab35ba...

CVE-2022-4876 Kaltura mwEmbed DefaultSettings.php cross site scripting

A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...

PT-2023-15890 · Kaltura · Kaltura Mwembed

Name of the Vulnerable Software and Affected Versions: Kaltura mwEmbed versions up to 2.96.rc1 Description: A vulnerability was found in Kaltura mwEmbed, affecting some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTP X FORWARDED HOST leads to...

Kaltura mwEmbed 跨站脚本漏洞

mwEmbed is Kaltura open source a Kaltura HTML5 media library . Enables you to take advantage of HTML5 and Flash's unified configuration and development API. A cross-site scripting vulnerability exists in versions prior to Kaltura mwEmbed 2.96.rc1, which stems from some unknown processing in the...

Malicious code in mwembed-dash-everywhere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b564441937b7693ebbf08a6d629cfb0eb246e7be18bcf10818964d72f26892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4742 Malicious code in mwembed-dash-everywhere (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b564441937b7693ebbf08a6d629cfb0eb246e7be18bcf10818964d72f26892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...