SUSE CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

SUSE CVE-2013-7371

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...

Sencha Connect Access Control Error Vulnerability

Sencha Connect is a Javascript-based codebase from Sencha, Inc. that provides extended functionality for the Node http server. Sencha Connect suffers from an access control error vulnerability that stems from the content of a file downloaded by downloadFileFromResponse being visible to all other...