npm/connect CVE-2013-7370: low, EPSS 1.42%

methodOverride Middleware Reflected Cross-Site Scripting in connect

Action: Upgrade connect to 2.8.1 or later.

npm i connect@2.8.1

Affected

Fixed versions

Sources

• osv: GHSA-3fw8-66wf-pr7m
• https://nvd.nist.gov/vuln/detail/CVE-2013-7370
• https://github.com/senchalabs/connect/issues/831
• https://github.com/senchalabs/connect/commit/126187c4e12162e231b87350740045e5bb06e93a
• https://github.com/senchalabs/connect/commit/277e5aad6a95d00f55571a9a0e11f2fa190d8135
• https://access.redhat.com/security/cve/cve-2013-7370
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370
• https://security-tracker.debian.org/tracker/CVE-2013-7370
• https://www.npmjs.com/advisories/3
• http://www.openwall.com/lists/oss-security/2014/04/21/2
• http://www.openwall.com/lists/oss-security/2014/05/13/1

CVE-2013-7370 · published 2020-08-31T22:41:27Z · modified 2023-11-08T03:57:28.815077Z · JSON