CyberSecBulletin

SugarSync vulnerabilities

We track 1 vulnerability in SugarSync products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 3, 2024.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest SugarSync vulnerabilities

  • 7.8 High severity

    SugarSync: Unquoted Search Path or Element

    CVE-2024-4461SugarSync

    Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.