Sonicjs
Monthly
Authenticated users with author or editor roles in SonicJS through 3.0.0 can create, modify, publish, or soft-delete documents they do not own because the content write routes check only coarse role labels and fail to enforce per-document ACLs or administrator deny overrides. The flaw requires a valid bearer JWT or API key and is bounded to content integrity and availability rather than data disclosure. A vendor fix is referenced by PR #1147, and no public exploit identified at time of analysis is reported in the supplied data, with no CISA KEV entry listed.
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
SonicJS through 0.6.0 allows file overwrite. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated users with author or editor roles in SonicJS through 3.0.0 can create, modify, publish, or soft-delete documents they do not own because the content write routes check only coarse role labels and fail to enforce per-document ACLs or administrator deny overrides. The flaw requires a valid bearer JWT or API key and is bounded to content integrity and availability rather than data disclosure. A vendor fix is referenced by PR #1147, and no public exploit identified at time of analysis is reported in the supplied data, with no CISA KEV entry listed.
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
SonicJS through 0.6.0 allows file overwrite. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.