Iobroker Js Controller
1 CVEs
product
Monthly
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Path Traversal
Iobroker Js Controller
NVD
GitHub
CVSS 3.1
7.5
EPSS
2.2%
CVE-2019-10767
npm
EPSS 2%
CVSS 7.5
HIGH
POC
PATCH
This Week
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Path Traversal
Iobroker Js Controller
NVD
GitHub