Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103571
HistoryOct 28, 2021 - 12:00 a.m.

Mycodo path traversal vulnerability

2021-10-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

39.7%

Mycodo is an environment monitoring and conditioning system. Used to couple inputs and outputs to sense and manipulate the environment, Mycodo is vulnerable to a path traversal vulnerability in versions prior to 8.12.7, which stems from a networked system or product failing to properly filter special elements in a resource or file path. An attacker with a right of access endpoint could exploit the vulnerability to download files outside of the expected directory.

CPENameOperatorVersion
mycodo mycodolt8.12.7

0.001 Low

EPSS

Percentile

39.7%

Related for CNVD-2021-103571