Malicious Package in impala - Critical Vulnerability
Summary
GHSA-92px-q4w8-hrr5: Malicious Package in impala. Affects impala versions 1.1.7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Impala is an npm package used for web development. It provides a set of tools and utilities to enhance the development process. However, version 1.1.7 of the impala package was found to contain malicious code. This code, when executed in the browser, would extract sensitive information such as passwords, cvc, and card numbers from forms. The extracted values were then sent to a remote server at https://js-metrics.com/minjs.php?pl=. This vulnerability poses a significant risk to user data and privacy.
Vulnerability Detail
The vulnerability in version 1.1.7 of the impala package allows an attacker to extract sensitive information from web forms. By injecting malicious code, the attacker can collect passwords, cvc codes, and card numbers entered by users. This information can be used for identity theft, financial fraud, or other malicious activities. The code sends the extracted data to a remote server controlled by the attacker. The impact of this vulnerability can be severe, compromising the security and privacy of users.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
Version 1.1.7 of the impala package contains a critical vulnerability that allows an attacker to extract sensitive information from web forms. To mitigate this risk, it is essential to replace the affected version with a secure version and evaluate the impact on user data. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for impala →
FAQ
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert analyzes your package-lock.json file and provides real-time alerts for open-source vulnerabilities.
The potential consequences of this vulnerability include unauthorized access to user accounts, theft of sensitive information, financial fraud, and compromise of user privacy.
No specific workaround is available for this vulnerability. It is recommended to replace the affected version of the impala package with a secure version.
Yes, this vulnerability can be exploited remotely. The malicious code is executed in the user's browser, allowing an attacker to extract sensitive information and send it to a remote server.
This vulnerability is classified as critical with a CVSS score of 9.8. It poses a significant risk to user data and privacy.
