2 matches found
DEBIAN-CVE-2022-46165
Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device looks over the shared folder settings and...
5.4CVSS5.3AI score0.00778EPSS
SaveExploits1References1
PT-2023-14815 · Syncthing +2 · Syncthing +2
Name of the Vulnerable Software and Affected Versions: Syncthing versions prior to 1.23.5 Description: The issue concerns a stored cross-site scripting attack in Syncthing, an open-source continuous file synchronization program. A compromised instance with shared folders could sync malicious file...
7.5CVSS7.2AI score0.0197EPSS
SaveExploits1References29
20