VYPR
Medium severity6.1NVD Advisory· Published Dec 11, 2019· Updated Jun 17, 2026

CVE-2013-7370

CVE-2013-7370

Description

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
connectnpm
< 2.8.12.8.1

Affected products

8
  • cpe:2.3:a:redhat:openshift:2.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:sencha:connect:*:*:*:*:*:node.js:*:*
    Range: <2.8.1
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • node-connect/node-connectdescription
  • ghsa-coords
    Range: < 2.8.1

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.