Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Sencha Component: Connect Clear all filters
TI-2013-06035 CVE-2013-7371 · GHSA-6w62-83g6-rfhj

Cross-site scripting in node-connect

Priority LOW 30

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01435 Published 2019-12-11 Fixed in 2.8.2 CWE-79
TI-2018-02715 CVE-2018-3717 · GHSA-rch9-xh7r-mqgw

Cross-site scripting in HackerOne connect node module

Priority LOW 27

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01306 Published 2018-06-07 Fixed in 2.14.0 CWE-79