Sync-in

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Sync-in records in CISA KEV

No Sync-in vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sync-in Server 3 records HIGH

Records

3 records in Sync-in Server · all components

TI-2026-29787 CVE-2026-41161 · GHSA-43fj-qp3h-hrh5

Username Enumeration via Timing Attack

HIGH 70

Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00333 Published 2026-05-08 Fixed in 2.2.0 CWE-208

TI-2025-41214 CVE-2025-67438 · GHSA-9jmq-xgjm-p8c2

A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows…

MEDIUM 60

A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's browser.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00318 Published 2026-02-20 Fixed in 1.9.3 CWE-79

TI-2025-35423 CVE-2025-56869 · GHSA-xh7h-h275-6q2f

Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated…

LOW 25

Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in backend/src/applications/files/servic…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00741 Published 2025-09-19 No fix listed CWE-22

Open these records in search →

Critical	0
High	2
Medium	6
Low	0
No CVSS	0