Sencha Labs Connect 2.13.0 for Node.js

CPE Details

Sencha Labs Connect 2.13.0 for Node.js
2.13.0
2019-07-23
14h48 +00:00
2019-07-23
14h48 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:sencha:connect:2.13.0:*:*:*:*:node.js:*:*

Informations

Vendor

sencha

Product

connect

Version

2.13.0

Target Software

node.js

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-3717 2018-06-07 02h00 +00:00 connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.
5.4
Medium