CVE-2013-7371

npm/connect CVE-2013-7371: medium 6.1, EPSS 1.44%

Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware

Action: Upgrade connect to 2.8.2 or later.

npm i connect@2.8.2

Affected

Fixed versions

Sources

• osv: GHSA-6w62-83g6-rfhj
• https://nvd.nist.gov/vuln/detail/CVE-2013-7371
• https://github.com/senchalabs/connect/issues/831
• https://github.com/senchalabs/connect/commit/126187c4e12162e231b87350740045e5bb06e93a
• https://github.com/senchalabs/connect/commit/277e5aad6a95d00f55571a9a0e11f2fa190d8135
• https://access.redhat.com/security/cve/cve-2013-7371
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92710
• https://github.com/senchalabs/connect
• https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting
• https://security-tracker.debian.org/tracker/CVE-2013-7371
• http://www.openwall.com/lists/oss-security/2014/04/21/2
• http://www.openwall.com/lists/oss-security/2014/05/13/1

CVE-2013-7371 · published 2022-05-05T00:29:11Z · modified 2023-11-08T03:57:28.875899Z · JSON