High severity7.5NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2021-26504

Description

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dgtl/Huemagic
cpe:2.3:a:dgtl:huemagic:3.0.0:*:*:*:*:node.js:*:*
Foddy/node-red-contrib-huemagiccpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =3.0.0

Patches

Vulnerability mechanics

References

github.com/Foddy/node-red-contrib-huemagic/issues/217nvdExploitIssue TrackingPatch

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000