Sonicjs Sonicjs
2 CVEs affecting Sonicjs Sonicjs. Latest disclosed: 2023-06-05. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42002 | Critical | 9.1 | 2022-10-01 | SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutation… |
CVE-2023-33690 | Medium | 6.5 | 2023-06-05 | SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS. |