CyberSecBulletin

Sonicjs vulnerabilities

We track 1 vulnerability in Sonicjs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2022.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Sonicjs vulnerabilities

  • 9.1 Critical severity

    Sonicjs: Out-of-bounds Write

    CVE-2022-42002SonicjsEPSS 1.3%

    SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate. Both of these mutations can be called without any authentication to overwrite any files on a SonicJS application, leading t