Read the docs

Sencha

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sencha records in CISA KEV

No Sencha vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Connect 4 records LOW Ext Js 2 records MEDIUM

Records

4 records in Connect · all components

TI-2013-06035 CVE-2013-7371 · GHSA-6w62-83g6-rfhj

Cross-site scripting in node-connect

Priority LOW 30

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01435 Published 2019-12-11 Fixed in 2.8.2 CWE-79
TI-2018-02715 CVE-2018-3717 · GHSA-rch9-xh7r-mqgw

Cross-site scripting in HackerOne connect node module

Priority LOW 27

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01306 Published 2018-06-07 Fixed in 2.14.0 CWE-79
Open these records in search →