Description

`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

Remediation

References

CVE-2017-16044

Related Vulnerabilities

WordPress Plugin Database Backup for WordPress Cross-Site Scripting (2.3.3)

WordPress Plugin VikRentCar Car Rental Management System Cross-Site Scripting (1.1.9)

WordPress Plugin Appointment Booking Calendar CSV Injection (1.3.34)

WordPress Plugin Insert or Embed Articulate Content into WordPress Arbitrary File Upload (4.3000000023)

Apache Tomcat Unprotected Transport of Credentials Vulnerability (CVE-2023-28708)

Severity

High

Classification

CVE-2017-16044 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities