Sensitive Information Disclosure

typo3/cms is vulnerable to Sensitive Information Disclosure. The vulnerability is due to mechanisms used for configuration of RequireJS package loading, which can potentially allow an attacker to retrieve additional information about the installed system and third-party extensions...

GHSA-F624-8HFQ-5FH3 TYPO3 Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

TYPO3 Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

PT-2024-40261

Name of the Vulnerable Software and Affected Versions: RequireJS affected versions not specified Description: A potential issue has been discovered in the mechanisms used for configuration of RequireJS package loading, making it susceptible to information disclosure. This could allow a potential...

Information Disclosure

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to Inline JavaScript settings within the RequireJS package, which allows an attacker to retrieve additional information about the installed system and third-party extensions...

TYPO3 Disclosure of Information about Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

GHSA-P2H4-7FP3-CMH8 TYPO3 Disclosure of Information about Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...

PT-2024-40385 · Requirejs · Requirejs

Name of the Vulnerable Software and Affected Versions: RequireJS affected versions not specified Description: A potential issue has been discovered in the mechanisms used for configuration of RequireJS package loading, making it susceptible to information disclosure. This could allow a potential...

Prototype Pollution

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Prototype Pollution via the config function, due to improper sanitization of its parameter content. Note: This advisory is revoked as a duplicate of CVE-2024-38999. PoC js var requirejs=...

Malicious code in requirejs-injector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d97c2ea570f4f2be827b6b8f1bbaff3230a6c0824401db8ce32b7d19d570bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5758 Malicious code in requirejs-injector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d97c2ea570f4f2be827b6b8f1bbaff3230a6c0824401db8ce32b7d19d570bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel (>=1.2.0, <=1.3.0), com.danhaywood.isis.wicket:danhaywood-isis-wicket-fullcalendar (1.2.0) +238 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.7.0)

org.apache.wicket:wicket-core MAVEN version 6.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel =1.2.0, =1.2.0, =1.2.1 -...

Information Disclosure of Installed Extensions

It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions...