CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware

• CWE-79

• http://www.openwall.com/lists/oss-security/2014/04/21/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/05/13/1Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2013-7370Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370Issue Tracking, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370Issue Tracking
• https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_ScriptingBroken Link, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-7370Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/21/2Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/05/13/1Mailing List, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2013-7370Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370Issue Tracking, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370Issue Tracking
• https://nodesecurity.io/advisories/methodOverride_Middleware_Reflected_Cross-Site_ScriptingBroken Link, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-7370Third Party Advisory

Published

Dec 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7364An unspecified J2EE core service in the J2EE Engine in SAP N…
• CVE-2013-7365Cross-site scripting (XSS) vulnerability in SAP Enterprise P…
• CVE-2013-7366The SAP Software Deployment Manager (SDM), in certain unspec…
• CVE-2013-7367SAP Enterprise Portal does not properly restrict access to t…
• CVE-2013-7368Multiple cross-site scripting (XSS) vulnerabilities in Gnew …
• CVE-2013-7369SQL injection vulnerability in an unspecified DLL in the FSD…
• CVE-2013-7371node-connects before 2.8.2 has cross site scripting in Sench…6.1
• CVE-2013-7372The engineNextBytes function in classlib/modules/security/sr…
• CVE-2013-7373Android before 4.4 does not properly arrange for seeding of …
• CVE-2013-7374The Ubuntu Date and Time Indicator (aka indicator-datetime) …
• CVE-2013-7375SQL injection vulnerability in includes/classes/Authenticate…
• CVE-2013-7376Multiple cross-site request forgery (CSRF) vulnerabilities i…