critical9.8
CVE-2019-10765
iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.
Impact
iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iobroker | Iobroker.Admin | before 3.6.12 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ioBroker/ioBroker.admin/commit/16b2b325ab47896090bc7f54b77b0a97ed74f5cd
- https://snyk.io/vuln/SNYK-JS-IOBROKERADMIN-534634
- https://github.com/ioBroker/ioBroker.admin/commit/16b2b325ab47896090bc7f54b77b0a97ed74f5cd
- https://snyk.io/vuln/SNYK-JS-IOBROKERADMIN-534634