Sencha Connect
4 CVEs affecting Sencha Connect. Latest disclosed: 2019-12-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-4691 | Medium | 6.1 | 2019-12-27 | Sencha Labs Connect has XSS with connect.methodOverride() |
CVE-2013-7371 | Medium | 6.1 | 2019-12-11 | node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370) |
CVE-2013-7370 | Medium | 6.1 | 2019-12-11 | node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware |
CVE-2018-3717 | Medium | 5.4 | 2018-06-07 | connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware. |