VYPR
Medium severity6.1NVD Advisory· Published Dec 11, 2019· Updated Jun 17, 2026

CVE-2013-7371

CVE-2013-7371

Description

node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
connectnpm
< 2.8.22.8.2

Affected products

6
  • cpe:2.3:a:sencha:connect:*:*:*:*:*:node.js:*:*
    Range: <2.8.2
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • ghsa-coords
    Range: < 2.8.2
  • node-connect/node-connectv5
    Range: < 2.8.2

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.