CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

CVE-2013-7371

creationtimestamp| type| source ---|---|--- 2024-03-10 11:07:26+00:00| seen| https://t.me/ctinow/204211...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +1667 more potentially affected by CVE-2013-7371 via connect (>=2.0.0, <=2.8.1)

connect NPM version =2.0.0, =0.0.1, =1.0.1, =0.0.5, =0.0.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =1.0.3, =0.0.5, =1.0.39 and more Source cves: CVE-2013-7371 Source advisory: OSV:GHSA-6W62-83G6-RFHJ...

CVE-2013-7371

CVE-2013-7371 affects node-connects prior to 2.8.2, where a cross-site scripting vulnerability exists in the Sencha Labs Connect middleware (resulting from an incomplete fix for CVE-2013-7370). Impact is XSS via the Connect middleware as described in multiple sources. A remediation is to update t...