Malicious code in buy-button-storefront (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4b8b996702ddd85ace1d3199b515bf69d94da28c2ef23e096944093eaaa46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Users unable to launch - Error: "Cannot complete your request"

'Cannot complete your request' while trying to access the Web Store URL. StoreFront events show that a loopback communication failed...

Citrix Analytics Service (CAS) Onboarding Assistant

CAS Onboarding Assistant helps troubleshoot issues while onboarding your StoreFront with Citrix Analytics. The Storefront server might fail to connect to Citrix Analytics after importing the configuration settings from Citrix Analytics to your StoreFront server. CAS Onboarding Assistant checks al...

Diavante vue-storefront-api and storefront-api disclose stack trace

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

GHSA-9WXJ-37P8-49FF Diavante vue-storefront-api and storefront-api disclose stack trace

In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names...

Cross-Site Scripting (XSS)

shopware/shopware is vulnerable to non-stored cross-site scripting. The vulnerability exists in storefront because the input parameters are not properly filtered which allows an attacker to inject and execute arbitrary scripts via url...

GHSA-4G29-FCCR-P59W Reflected Cross-site Scripting in Shopware storefront

Impact Not-stored XSS in storefront. Request parameter were directly assigned to the template, so that malicious code could be send via an URL. Patches We recommend updating to the current version 5.7.9. You can get the update to 5.7.9 regularly via the Auto-Updater or directly via the download...

Cross site scripting

Shopware is an open source e-commerce software platform. Prior to version 5.7.9, Shopware is vulnerable to non-stored cross-site scripting in the storefront. This issue is fixed in version 5.7.9. Users of older versions may attempt to mitigate the vulnerability by using the Shopware security plug...

CVE-2022-24873 Non-Stored Cross-site Scripting in Shopware storefront

Shopware is an open source e-commerce software platform. Prior to version 5.7.9, Shopware is vulnerable to non-stored cross-site scripting in the storefront. This issue is fixed in version 5.7.9. Users of older versions may attempt to mitigate the vulnerability by using the Shopware security plug...

HTML5 CWA configuration.js file is overwritten post the Storefront upgrade

The customized configuration.js file is overwritten under the path C:\Program Files\Citrix\Receiver Storefront\HTML5Client post Storefront upgrade...

Cannot start app **** - Issue when Storefront STA's configure as https.

Issue accessing the url of storefront store through Citrix ADC. Users are able to access storefront, but when users try to open any application it gives an error: Cannot start app However, when accessing the storefront url internally using store URL, all the applications open without problems,...

How to Enable StoreFront Verbose Logging

This article explainshow to use PowerShell to enable the native verbose logging and how to use Microsoft’s DebugView tool to collect traces. Requirements Basic knowledge of PowerShell...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

Cross site scripting

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

CVE-2022-27503

CVE-2022-27503 is a reflected Cross-Site Scripting (XSS) vulnerability in Citrix StoreFront when configured with SAML authentication. The issue affects Citrix StoreFront 1912 LTSR up to CU4 (1912.0.4000) and StoreFront 3.12 up to CU8 (3.12.8000). An attacker who has a valid session could inject a...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

Vulnerabilities fixed in Citrix products

Citrix has fixed several vulnerabilities in Citrix SD-WAN, Storefront, Endpoint Management and Gateway Plug-in. The vulnerabilities allow a remote malicious party to cause a Denial-of-Service DoS attack. The vulnerabilities with characteristics CVE-2022-27505 and CVE-2022-27506 are located in...

Citrix Systems Citrix StoreFront Server 跨站脚本漏洞

Citrix Systems Citrix StoreFront Server Citrix StoreFront Server,Citrix StoreFront Server is a Citrix Systems Citrix Systems is an indispensable component of Xen virtualization as part of the authentication and delivery management process. Citrix StoreFront Server, Citrix StoreFront Server, Citri...