Vulnerabilities

TI-2022-22809 CVE-2022-46165 · GHSA-9rp6-23gf-4c3h

Cross-site Scripting (XSS) in Web GUI in syncthing

MEDIUM 58

Syncthing is an open source, continuous file synchronization program.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00778 Published 2023-06-06 Fixed in 1.23.5 CWE-79

TI-2021-04502 CVE-2021-21404 · GHSA-x462-89pf-6r5h

LOW 37

Syncthing is a continuous file synchronization program.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0197 Published 2021-04-06 Fixed in 1.15.0 CWE-20

TI-2017-14639 CVE-2017-1000420 · GHSA-28xp-g7f6-7mhf

LOW 36

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01509 Published 2018-01-02 No fix listed CWE-59