TI-2026-29787 CVE-2026-41161 · GHSA-43fj-qp3h-hrh5
Username Enumeration via Timing Attack
Priority HIGH 70
Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing.
Vulnerabilities
3 records
TI-2025-41214 CVE-2025-67438 · GHSA-9jmq-xgjm-p8c2
A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows…
Priority MEDIUM 60
A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's browser.
TI-2025-35423 CVE-2025-56869 · GHSA-xh7h-h275-6q2f
Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated…
Priority LOW 25
Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in backend/src/applications/files/servic…