syncthing

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

syncthing records in CISA KEV

No syncthing vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Syncthing · all components

TI-2022-22809 CVE-2022-46165 · GHSA-9rp6-23gf-4c3h

MEDIUM 58

Syncthing is an open source, continuous file synchronization program.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00778 Published 2023-06-06 Fixed in 1.23.5 CWE-79

TI-2021-04502 CVE-2021-21404 · GHSA-x462-89pf-6r5h

LOW 37

Syncthing is a continuous file synchronization program.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0197 Published 2021-04-06 Fixed in 1.15.0 CWE-20

TI-2017-14639 CVE-2017-1000420 · GHSA-28xp-g7f6-7mhf

LOW 36

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01509 Published 2018-01-02 No fix listed CWE-59