Vendors / Sonicjs Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Sonicjs records in CISA KEV No Sonicjs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 62
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00902 · Published 2023-06-05 · No fix listed CWE-22
Priority MEDIUM 42
SonicJS through 0.6.0 allows file overwrite.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01303 · Published 2022-09-30 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
1 0 1 0 0
