CVE-2013-7370
Summary
| CVE | CVE-2013-7370 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-12-11 14:15:00 UTC |
|---|
| Updated | 2019-12-17 16:44:00 UTC |
|---|
| Description | node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1091166 – (CVE-2013-7370) CVE-2013-7370 nodejs-connect: XSS via HTTP request with a crafted method containing JavaScript |
MISC |
bugzilla.redhat.com |
Issue Tracking, Third Party Advisory |
| oss-security - CVE request: various NodeJS module vulnerabilities |
MISC |
www.openwall.com |
Mailing List, Third Party Advisory |
| Node Security Project | |
MISC |
nodesecurity.io |
Broken Link, Third Party Advisory |
| Bug 875166 – VUL-0: CVE-2013-7370: nodejs: methodOverride Middleware Reflected XSS |
MISC |
bugzilla.suse.com |
Issue Tracking |
| oss-security - Re: CVE request - node-connect: methodOverride middleware reflected cross-site scripting |
MISC |
www.openwall.com |
Mailing List, Patch, Third Party Advisory |
| CVE-2013-7370 |
MISC |
security-tracker.debian.org |
Third Party Advisory |
| CVE-2013-7370 - Red Hat Customer Portal |
MISC |
access.redhat.com |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 983842 Nodejs (npm) Security Update for connect (GHSA-3fw8-66wf-pr7m)
