EUVD-2022-52181

Malicious code in bioql PyPI...

CVE-2022-4927

A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be...

CVE-2022-4927

A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be...

Design/Logic Flaw

A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be...

CVE-2022-4927

The CVE-2022-4927 entry concerns ualbertalib NEOSDiscovery prior to 1.0.71. The vulnerability affects the file path app/views/bookmarks/_refworks.html.erb and enables manipulation that leads to navigation to a web link targeting an untrusted destination with window.opener access (reverse-tabnabbi...

CVE-2022-4927 ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing

A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be...

CVE-2022-4927 ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing

A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be...

CVE-2022-4927: Use of Web Link to Untrusted Target with window.opener Access

A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The attack may be...

PT-2023-15914 · Unknown · Ualbertalib Neosdiscovery

Name of the Vulnerable Software and Affected Versions: ualbertalib NEOSDiscovery version 1.0.70 Description: This issue affects some unknown processing of the file app/views/bookmarks/ refworks.html.erb. The manipulation leads to use of web link to untrusted target with window.opener access. The...

NEOSDiscovery 安全漏洞

NEOSDiscovery is the Discovery interface to the NEOS library. A security vulnerability exists in ualbertalib NEOSDiscovery versions prior to 1.0.71, which stems from the ability to use a web link to untrusted targets with access rights...