← All advisories

Medium severity6.1NVD Advisory· Published Nov 25, 2019· Updated Jun 17, 2026

CVE-2019-10771

CVE-2019-10771

Description

Characters in the GET url path are not properly escaped and can be reflected in the server response.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
iobroker.webnpm	< 2.4.10	2.4.10

Affected products

2

Iobroker/Iobroker.web
cpe:2.3:a:iobroker:iobroker.web:*:*:*:*:*:node.js:*:*
Range: <2.4.10
ghsa-coords
pkg:npm/iobroker.web
Range: < 2.4.10

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-6rjc-4pwr-3vp7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-10771ghsaADVISORY
snyk.io/vuln/SNYK-JS-IOBROKERWEB-534971nvdThird Party AdvisoryWEB
www.npmjs.com/advisories/1345ghsaWEB

News mentions

0

No linked articles in our index yet.