{"action":"Upgrade connect to 2.8.2 or later.","affected":[{"fixed":"2.8.2","introduced":"0"}],"component":"connect","cve_ids":["CVE-2013-7371"],"ecosystem":"npm","epss":0.01435,"exploited":false,"fixed_versions":["2.8.2"],"ghsa_id":"GHSA-6w62-83g6-rfhj","id":"tcs_01M5KF83W6YP4E5TE9QDWF77CA","modified_at":"2023-11-08T03:57:28.875899Z","published_at":"2022-05-05T00:29:11Z","references":["https://osv.dev/vulnerability/GHSA-6w62-83g6-rfhj","https://nvd.nist.gov/vuln/detail/CVE-2013-7371","https://github.com/senchalabs/connect/issues/831","https://github.com/senchalabs/connect/commit/126187c4e12162e231b87350740045e5bb06e93a","https://github.com/senchalabs/connect/commit/277e5aad6a95d00f55571a9a0e11f2fa190d8135","https://access.redhat.com/security/cve/cve-2013-7371","https://exchange.xforce.ibmcloud.com/vulnerabilities/92710","https://github.com/senchalabs/connect","https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_Scripting","https://security-tracker.debian.org/tracker/CVE-2013-7371","http://www.openwall.com/lists/oss-security/2014/04/21/2","http://www.openwall.com/lists/oss-security/2014/05/13/1"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6w62-83g6-rfhj","url":"https://osv.dev/vulnerability/GHSA-6w62-83g6-rfhj"}],"summary":"Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware"}