MediumCVSS 6.1
EPSS 0.65%
Sencha Labs Connect has XSS with connect.methodOverride()
Product
sencha connect vulnerabilities
4 published CVES affecting sencha connect, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 0
- Medium
- 4
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest sencha connect CVEs
Newest publication first
-
-
CVE-2013-7371 Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
PublishedMediumCVSS 6.1 EPSS 1.4%node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
-
MediumCVSS 6.1 EPSS 1.4%
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
-
MediumCVSS 5.4 EPSS 1.3%
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.