3 matches found
SUSE CVE-2013-7371
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...
SUSE CVE-2013-7370
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...
Sencha Connect Access Control Error Vulnerability
Sencha Connect is a Javascript-based codebase from Sencha, Inc. that provides extended functionality for the Node http server. Sencha Connect suffers from an access control error vulnerability that stems from the content of a file downloaded by downloadFileFromResponse being visible to all other...