Sync In Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-67438 npm MEDIUM PATCH This Month

vulnerability in Sync-in Server versions up to 1.9.3 is affected by cross-site scripting (xss) (CVSS 6.1).

XSS Sync In Server

NVD GitHub VulDB

CVSS 3.1

6.1

EPSS

0.0%

CVE-2025-56869 MEDIUM This Month

Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Sync In Server

NVD GitHub

CVSS 3.1

5.3

EPSS

0.1%

CVE-2025-67438 npm

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

vulnerability in Sync-in Server versions up to 1.9.3 is affected by cross-site scripting (xss) (CVSS 6.1).

XSS Sync In Server

NVD GitHub VulDB

CVE-2025-56869

EPSS 0% CVSS 5.3

MEDIUM This Month

Path Traversal Sync In Server

NVD GitHub