Описание
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-connect | not-affected | package |
Примечания
CVE for incomplete fix for CVE-2013-7370, fixed in 2.8.2
EPSS
Процентиль: 71%
0.01435
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 6 лет назад
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
CVSS3: 6.1
nvd
больше 6 лет назад
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
CVSS3: 6.1
github
больше 4 лет назад
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
EPSS
Процентиль: 71%
0.01435
Низкий