Sencha Connect vulnerabilities

4 vulnerabilities

Known vulnerabilities in Sencha Connect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2018-3717debiannode-connect+4
EPSS score
1.31%
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.6.1CVE-2013-4691senchaconnect
EPSS score
0.65%
Sencha Labs Connect has XSS with connect.methodOverride()6.1CVE-2013-7370debiannode-connect+6
EPSS score
1.42%
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware6.1CVE-2013-7371ubuntunode-connect+4
EPSS score
1.44%
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)