Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
syncthing records in CISA KEVNo syncthing vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 58
Syncthing is an open source, continuous file synchronization program.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00778 · Published 2023-06-06 · Fixed in 1.23.5 CWE-79
Priority LOW 37
Syncthing is a continuous file synchronization program.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0197 · Published 2021-04-06 · Fixed in 1.15.0 CWE-20
Priority LOW 36
Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01509 · Published 2018-01-02 · No fix listed CWE-59
Open these records in search →