CVE-2019-10765

CVE-2019-10765

EPSS 1.7%

iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.

Produtos afetados

n/a · iobroker.admin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/ioBroker/ioBroker.admin/commit/16b2b325ab47896090bc7f54b77b0a97ed74f5cd https://snyk.io/vuln/SNYK-JS-IOBROKERADMIN-534634