GHSA-P4G9-C9QR-WMG5 Cross-site Scripting in django-ajax-utilities

A vulnerability was found in Mobile Vikings Django AJAX Utilities and classified as problematic. This issue affects the function Pagination of the file djangoajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to cross site...

CVE-2017-20182

A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file djangoajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to...

CVE-2017-20182

A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file djangoajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to...

Cross site scripting

A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file djangoajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to...

CVE-2017-20182 Mobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting

A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file djangoajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to...

CVE-2017-20182 Mobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting

A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file djangoajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to...

CVE-2017-20182

The CVE-2017-20182 entry concerns Mobile Vikings Django AJAX Utilities (up to 1.2.1). The vulnerability resides in the Pagination function of django_ajax/static/ajax-utilities/js/pagination.js within the Backslash Handler, where manipulating the url parameter enables cross-site scripting. The iss...

PT-2023-10633

Name of the Vulnerable Software and Affected Versions Mobile Vikings Django AJAX Utilities versions up to 1.2.1 Description A problematic issue affects the Pagination function of the django ajax/static/ajax-utilities/js/pagination.js file in the Backslash Handler component. The manipulation of th...

icplayer 跨站脚本漏洞

icplayer is icplayer open source HTML5 player for an interactive course. A cross-site scripting vulnerability exists in versions prior to icplayer 0.819, which stems from a problem with the file addons/Commons/src/tts-utils.js, which can lead to cross-site scripting...

Prototype Pollution

utilities is vulnerable to Prototype Pollution. The vulnerability exists in the mix function of utilities/lib/core.js when the object is merged, which allows an attacker to cause prototype pollution...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

10.13zy1 (1.0.0), @luminati-io/jake (>=8.0.10-lum.0, <=8.0.10-lum.2) +43 more potentially affected by CVE-2023-26105 via utilities (>=1.0.4, <=1.0.6)

utilities NPM version =1.0.4, =8.0.10-lum.0, =8.0.19-sync, =2.1.0, =0.0.1-preview.3, =1.0.0, =0.0.1, =1.0.70, =0.0.1, =1.0.0, =1.0.39 and more Source cves: CVE-2023-26105 Source advisory: OSV:GHSA-WXFJ-84XF-7GXV...

GHSA-WXFJ-84XF-7GXV mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

CVE-2023-26105 affects all versions of the mde utilities package. The root cause is a vulnerability in the _mix function used during object merging, enabling prototype pollution with high impact (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Multiple advisories and records (NVD, Red Hat, ...