Description

This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js.

Remediation

References

https://snyk.io/vuln/SNYK-JS-MACFROMIP-1048336

https://www.npmjs.com/package/macfromip

Related Vulnerabilities

CVE-2021-23452 Vulnerability in npm package x-assign

CVE-2023-44794 Vulnerability in maven package cn.dev33:sa-token-core

CVE-2021-31522 Vulnerability in maven package org.apache.kylin:kylin-server-base

CVE-2021-21179 Vulnerability in maven package org.webjars.npm:electron

CVE-2021-32851 Vulnerability in npm package mind-elixir

Severity

Critical

Classification

CWE-78

Tags

Exploit Third Party Advisory Product