← Back

Sonicjs

sonicjs

Vendor: Sonicjs • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33690
1Sonicjs
1Sonicjs
Jun 17, 2026
Jun 5, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
CVE-2022-42002
1Sonicjs
1Sonicjs
Jun 17, 2026
Oct 1, 2022
N/A· v4
9.1 CRITICAL· v3
N/A· v2
SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any f...Show more
SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading to Arbitrary File Write and Delete.Show less