CVE-2013-7371
Summary
| CVE | CVE-2013-7371 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-12-11 15:15:00 UTC |
|---|
| Updated | 2019-12-16 19:57:00 UTC |
|---|
| Description | node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370) |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| IBM X-Force Exchange |
MISC |
exchange.xforce.ibmcloud.com |
Third Party Advisory, VDB Entry |
| oss-security - CVE request: various NodeJS module vulnerabilities |
MISC |
www.openwall.com |
Mailing List, Third Party Advisory |
| Node Security Project | |
MISC |
nodesecurity.io |
Broken Link, Third Party Advisory |
| Red Hat Customer Portal |
MISC |
access.redhat.com |
Broken Link, Third Party Advisory |
| CVE-2013-7371 |
MISC |
security-tracker.debian.org |
Third Party Advisory |
| oss-security - Re: CVE request - node-connect: methodOverride middleware reflected cross-site scripting |
MISC |
www.openwall.com |
Mailing List, Patch, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 994927 NodeJs (Npm) Security Update for connect (GHSA-6w62-83g6-rfhj)
