← All advisories

Critical severity9.8NVD Advisory· Published Nov 20, 2019· Updated Jun 17, 2026

CVE-2019-10765

CVE-2019-10765

Description

iobroker.admin before 3.6.12 allows attacker to include file contents from outside the /log/file1/ directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
iobroker.adminnpm	< 3.6.12	3.6.12

Affected products

2

iobroker/iobroker.admindescription
ghsa-coords
pkg:npm/iobroker.admin
Range: < 3.6.12

Patches

Vulnerability mechanics

References

5

github.com/ioBroker/ioBroker.admin/commit/16b2b325ab47896090bc7f54b77b0a97ed74f5cdnvdPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-IOBROKERADMIN-534634nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-54xj-q58h-9x57ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-10765ghsaADVISORY
www.npmjs.com/advisories/1346ghsaWEB

News mentions

0

No linked articles in our index yet.