Lucene search
+L

107 matches found

Github Security Blog
Github Security Blog
•added 2022/06/20 8:11 p.m.•5 views

Malware in mailjet-old-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2022/06/20 8:11 p.m.•5 views

Malware in mailjet-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•11 views

Malicious code in mailjet-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93fb770c6e4d41201a5a99a6c80f625e3841f7f5a30fbe615ae73112bc5d9dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
•added 2022/02/24 8:15 p.m.•44 views

CVE-2022-24709

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS0.00692EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/24 8:15 p.m.•30 views

Design/Logic Flaw

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

4.3CVSS6.6AI score0.00692EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/02/24 7:55 p.m.•12 views

CVE-2022-24709 Cross site scripting in @awsui/components-react

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS7.7AI score0.00692EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•12 views

CVE-2022-24709: Improper Neutralization of Input During Web Page Generation

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

8.8CVSS6.8AI score0.00692EPSS
SaveExploits0References2
Rows per page
Query Builder