Sync-in Sync-in_server
3 CVEs affecting Sync-in Sync-in_server. Latest disclosed: 2026-05-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-67438 | Medium | 6.1 | 2026-02-20 | A Stored Cross-Site Scripting (XSS) vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's… |
CVE-2026-41161 | Medium | 5.3 | 2026-05-08 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint co… |
CVE-2025-56869 | Medium | 5.3 | 2025-09-19 | Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.sa… |