Vendor
Iobroker
Products
3
CVEs
3
Across products
3
Status
Private
Products
3- 1 CVE
- 1 CVE
- 1 CVE
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-10765 | Cri | 0.57 | 9.8 | 0.02 | Nov 20, 2019 | iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory. | ||
| CVE-2019-10767 | Hig | 0.42 | 7.5 | 0.02 | Nov 21, 2019 | An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. **Note:** The attacker has to be logged in if the… | ||
| CVE-2019-10771 | Med | 0.40 | 6.1 | 0.01 | Nov 25, 2019 | Characters in the GET url path are not properly escaped and can be reflected in the server response. |
- risk 0.57cvss 9.8epss 0.02
iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.
- risk 0.42cvss 7.5epss 0.02
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. **Note:** The attacker has to be logged in if the…
- risk 0.40cvss 6.1epss 0.01
Characters in the GET url path are not properly escaped and can be reflected in the server response.