4 matches found
Malicious code in wix-realtime-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8234b124b5133dd9e6e23a2b6eafab2206f7b3dc67f99ba3f6ba1ef72012cc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2017-7662
Apache CXF Fediz ships with an OpenId Connect OIDC service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF Cross Style Request Forgery style vulnerability has been found in this web application in Apache CXF Fediz...
PT-2017-17868
Name of the Vulnerable Software and Affected Versions Apache CXF Fediz versions prior to 1.4.0 Apache CXF Fediz versions prior to 1.3.2 Description A Cross-Site Request Forgery CSRF style issue has been found in the OpenId Connect OIDC service's Client Registration Service of Apache CXF Fediz. Th...
CVE-2017-7662: Cross-Site Request Forgery (CSRF)
Apache CXF Fediz ships with an OpenId Connect OIDC service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF Cross Style Request Forgery style vulnerability has been found in this web application in Apache CXF Fediz...